Added sanity check in hash_init() and mac_init().

Conflicts:
	lib/gnutls_hash_int.c
Corrected prototype.
released 3.2.10
reduced the TLS and DTLS version requirements for all ciphersuites that are not GCM.
tolerate servers that included the SUPPORTED ECC extension.

This is an extension that is defined to be sent by the client but there
are servers that include it as well. Most other implementations tolerate
this behavior so we do.
corrected typo
doc update
When two initial keywords are specified then treat the second as having the '+' modifier.

This will handle SECURE256:SECURE128 the same way as SECURE256:+SECURE128.
doc update
consider the initial keyword set even when it's set to NONE.
doc update
updated reference manual to remove individual indexes that were not working.
When setting multiple initial keywords in a priority string, the security level set is the one of the lowest security.
Added flag GNUTLS_PKCS11_TOKEN_TRUSTED_UINT that can be used to obtain p11-kit's P11_KIT_MODULE_TRUSTED flag.
when using a PKCS #11 module for verification ensure that it has been marked a trusted module in p11-kit.
removed unimplemented API.
doc update
use newlines in error printing
Added --ask-pass certtool option to allow asking for passwords even when in batch mode.
doc update