SSL-PROBLEMS: describes common curl+SSL problems
SSL-PROBLEMS: add "missing intermediate certificates" piece
README.http2: clarify the build prerequisites
RELEASE-NOTES: Synced with 8ddda0e999
openssl: info massage with SSL version used

Patch-by: byte_bucket
http2: free resources on disconnect

... and use Curl_safefree() instead of free()
TODO: remove http2, we now have it
chunked-encoding: provide a readable error string for chunked errors
ssh: abort immediately on a header callback error
ssh: removed a redundant close state transition
test640/1: add tests for --head with sftp and scp

This option is currently rather useless with these protocols
when no quote command is given, but it is valid.
docs: fixed a bunch of typos
ssh: prevent a logic error that could result in an infinite loop
valgrind.supp: added another test 165 suppression

This one seems to come and go as the optimizer decides how best
to inline some functions.
tests: disable valgrind on the remaining scp/sftp tests
tests: added missing HTTP NTLM auth keywords

Also, removed an unneeded strippart
tests: made the SASL modes separate keywords
nss: do not enable AES cipher-suites by default

... but allow them to be enabled/disabled explicitly.  The default
policy should be maintained at the NSS level.
nss: allow to enable/disable new HMAC-SHA256 cipher-suites

... if built against a new enough version of NSS
nss: allow to enable/disable new AES GCM cipher-suites

... if built against a new enough version of NSS