Note that it initially applies to 1.0.2, and not to HEAD. This is
in order to allow development with existing libunbound installations
that are dependent on OpenSSL 1.0.x. More details in RT.

RT: 3003

Reencode certificates in X509_sign_ctx as well as X509_sign.

This was causing a problem in the x509 application when it modified an
existing certificate.
(cherry picked from commit c6d8adb8)

While ARMv7 in general is capable of unaligned access, not all instructions
actually are. And trouble is that compiler doesn't seem to differentiate
those capable and incapable of unaligned access. Side effect is that kernel
goes into endless loop retrying same instruction triggering unaligned trap.
Problem was observed in xts128.c and ccm128.c modules. It's possible to
resolve it by using (volatile u32*) casts, but letting STRICT_ALIGNMENT
be feels more appropriate.
(cherry picked from commit 3bdd8052)

(cherry picked from commit 04638f2f)

(cherry picked from commit 0ded2a06)

(cherry picked from commit 944bc29f)

Don't check for binary curves by checking methods: the values will
be different in FIPS mode as they are redirected to the validated module
version.
(cherry picked from commit 94782e0e)

enhance EC method to support setting curve type when generating keys and add parameter encoding option
(cherry picked from commit 24edfa9d)

The only standard compression method is stateful and is incompatible with
DTLS.

PR: 3005
(cherry picked from commit 5702e965)

PR: 3002
(cherry picked from commit 5c600465)

(cherry picked from commit 80ccc66d)