Strengthen default cipher list
Explicitly set cert verify depth if not specified
Add openssl_get_cert_locations() function
Release ssl buffers
Disable TLS compression by default in both clients and servers
Add 'capture_session_meta' context option
Add 'honor_cipher_order' server context option
Update ifdef check for SSL_OP_NO_COMPRESSION flag
Improve server forward secrecy, refactor client SNI
Use crypto method flags; add tlsv1.0 wrapper; add wrapper tests
Mitigate client-initiated SSL renegotiation DoS