Missing initialization; OpenSSL PR#3289 and #3345 via OpenSSL trunk.
Missing initialization for error line in error paths; from Coverity via
OpenSSL trunk.
Make CMS_decrypt_set1_pkey() return an error if no recipient type matches,
instead of returning a random key; OpenSSL PR #3348 via OpenSSL trunk
Missing calloc() return value check in dgram_sctp_ctrl(); from Kurt Roeckx via
OpenSSL trunk
In ssl3_get_client_key_exchange() parsing a GOST session key, invoke the
regular ASN.1 parser rather than trying to handroll one and potentially
misbehave; OpenSSL PR #3335 via OpenSSL trunk.
When looking for the issuer of a certificate, if the current candidate is
expired or not valid yet, continue looking; only return an expired certificate
if no valid certificates have been found.

OpenSSL PR #3359 via OpenSSL trunk.
Remove duplicate 0x for salt len in output; Martin Kaiser via OpenSSL trunk.
Fix version number processing in cms_sd_set_version(); OpenSSL PR #3249 via
OpenSSL trunk.
Fix incorrect mlinks
ok bcook@
In dtls1_clear_queues(), free buffered_add_data.q correctly, it's made of
DTLS1_RECORD_DATA, not hm_fragment.

OpenSSL PR #3286 via OpenSSL trunk.
Correct incorrect mlinks
ok bcook@
Accept CCS again after `finished' has been sent by the client; at this point
keys have been correctly set up so it is ok to accept CCS from the server.
Without renegotiation can sometimes fail.

OpenSSL PR #3400 via OpenSSL trunk.
Make sure BN_sqr never returns negative numbers.
OpenSSL PR #3400 via OpenSSL trunk.
Fix incorrect duplicate mlinks
ok bcook@
More memory leaks and unchecked allocations; OpenSSL PR #3403 via OpenSSL
trunk. (note we had already fixed some of the issues in that PR independently)
Fix OID encoding for single components. OpenSSL PR #2556 via OpenSSL trunk.

(be sure to make cleandir and make includes before building)
Tolerate critical AKID in CRLs; OpenSSL PR #3014 via OpenSSL trunk, and
also update the comments to reflect what the code now does.
move all the feature settings to a common header.
probably ok beck jsing miod
no compression is also a feature of libressl
additional features: no buffer freelists and no heartbleed