When looking for the issuer of a certificate, if the current candidate is
expired or not valid yet, continue looking; only return an expired certificate
if no valid certificates have been found.

OpenSSL PR #3359 via OpenSSL trunk.
Remove duplicate 0x for salt len in output; Martin Kaiser via OpenSSL trunk.
Fix version number processing in cms_sd_set_version(); OpenSSL PR #3249 via
OpenSSL trunk.
In dtls1_clear_queues(), free buffered_add_data.q correctly, it's made of
DTLS1_RECORD_DATA, not hm_fragment.

OpenSSL PR #3286 via OpenSSL trunk.
Accept CCS again after `finished' has been sent by the client; at this point
keys have been correctly set up so it is ok to accept CCS from the server.
Without renegotiation can sometimes fail.

OpenSSL PR #3400 via OpenSSL trunk.
Make sure BN_sqr never returns negative numbers.
OpenSSL PR #3400 via OpenSSL trunk.
More memory leaks and unchecked allocations; OpenSSL PR #3403 via OpenSSL
trunk. (note we had already fixed some of the issues in that PR independently)
Fix OID encoding for single components. OpenSSL PR #2556 via OpenSSL trunk.

(be sure to make cleandir and make includes before building)
Tolerate critical AKID in CRLs; OpenSSL PR #3014 via OpenSSL trunk, and
also update the comments to reflect what the code now does.
move all the feature settings to a common header.
probably ok beck jsing miod
no compression is also a feature of libressl
additional features: no buffer freelists and no heartbleed
In EVP_PBE_alg_add don't use the underlying NID for the cipher
as it may have a non-standard key size; OpenSSL PR #3206 via OpenSSL trunk.
In asn1_get_length(), tolerate leading zeroes in BER encoding.
OpenSSL PR #2746 via OpenSSL trunk
Fix copy for CCM, GCM and XTS.

Internal pointers in CCM, GCM and XTS contexts should either be
NULL or set to point to the appropriate key schedule. This needs
to be adjusted when copying contexts.

OpenSSL PR #3272 with further fixes, from OpenSSL trunk
In ASN1_get_object(), reject primitive encodings using the indefinite length
constructed form. OpenSSL PR #2438 via OpenSSL trunk
Make this file parsable by pod2man without errors.
ok bcook@