sha1-x86_64.pl: add missing rex prefix in shaext.

PR: 3405
aesni-sha256-x86_64.pl: add missing rex in shaext.

PR: 3405
evp/e_aes_cbc_sha[1|256].c: fix -DPEDANTIC build.
Accept CCS after sending finished.

Allow CCS after finished has been sent by client: at this point
keys have been correctly set up so it is OK to accept CCS from
server. Without this renegotiation can sometimes fail.

PR#3400
Enforce _X509_CHECK_FLAG_DOT_SUBDOMAINS internal-only
aesp8-ppc.pl: add CTR mode.
aesni-sha[1|256]-x86_64.pl: fix logical error and MacOS X build.
Fix shadow declaration.
Fix signed/unsigned comparisons.
Added custom PBKDF2 iteration count to PKCS8 tool.
Added documentation for -iter for PKCS#8
Conform to whitespace conventions
Tidied up, added include to stdlib, removed "goto bad" usage
Document -trusted_first option in man pages and help.

Add -trusted_first description to help messages and man pages
of tools that deal with certificate verification.
smime man page: add missing options in SYNOPSIS

-CAfile and -CApath is documented in OPTIONS but is missing
in SYNOPSIS, add them there
add description of missing options to verify man page

The options related to policy used for verification, verification
of subject names in certificate and certificate chain handling
were missing in the verify(1) man page. This fixes this issue.
sort the options in verify man page alphabetically

just making sure the options are listed in the alphabetical order
both in SYNOPSIS and DESCRIPTION, no text changes
add references to verify(1) man page for args_verify() options

cms, ocsp, s_client, s_server and smime tools also use args_verify()
for parsing options, that makes them most of the same options
verify tool does. Add those options to man pages and reference
their explanation in the verify man page.
Fix minor typos
Fixed Windows compilation failure