Submitted by: Matthew D Wood
Reviewed by: Bodo Moeller

Submitted by: ran@cryptocom.ru
Reviewed by: steve@openssl.org

improvement on Core2. I still need to detect Core2 and choose this
path...

for 64-bit alignment was not removed.

Note: the RAND_bytes() manual page says:
 RAND_bytes() puts num cryptographically strong pseudo-random bytes into buf.
It does not talk about using the previous contents of buf so we are working
as documented.

code checking tools.
PR: 1499

include release date of 0.9.8e

selection remodeling

Submitted by: Victor Duchovni

BIO and BIO_gets().

EHLO or CAPABILITY handshake before sending STARTTLS

Submitted by: Goetz Babin-Ebell <goetz@shomitefo.de>

PR: 1152
Submitted by: Mike Frysinger <vapier@gentoo.org>

PR: 1277
Submitted by: Mike Frysinger <vapier@gentoo.org>

PR: 1459
Submitted by: tnitschke@innominate.com
Reviewed by: steve@openssl.org

Change ssl_create_cipher_list() to prefer ephemeral ECDH over
ephemeral DH.

ciphersuite string such as "DEFAULT:RSA" cannot enable
authentication-only ciphersuites.

Also, change ssl_create_cipher_list() so that it no longer
starts with an arbitrary ciphersuite ordering, but instead
uses the logic that we previously had in SSL_DEFEAULT_CIPHER_LIST.
SSL_DEFAULT_CIPHER_LIST simplifies into just "ALL:!aNULL:!eNULL".