now use an internal RAND_METHOD. All dependencies to OpenSSL standard
PRNG are now removed: it is the applications resposibility to setup
the FIPS PRNG and initalise it.

Initial OpenSSL RAND_init_fips() function that will setup the DRBG
for the "FIPS capable OpenSSL".

used by applications directly and the X9.31 PRNG is deprecated by new
FIPS140-2 rules anyway.

to missing DRBG support in libcrypto.

in FIPS builds.

Set fips_thread_set properly.

to test a "stuck" DRBG.

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix DTLS Retransmission Buffer Bug

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Don't change state when answering DTLS ClientHello.

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix DTLS fragment reassembly bug.

are undisturbed.

Allow setting of "rand" callbacks for DRBG.

in OPENSSL_init().

ensure OPENSSL_init() is always linked into an application.

used to set up any appropriate functions such as FIPS callbacks without
requiring an explicit application call.

test applications.

pointer to a buffer instead of copying to a fixed length buffer. This
removes the entropy and nonce length restrictions.

this will perform all standalone operations such as setting error
callbacks, entering FIPS mode etc.

Submitted by Steven M. Schweda <sms@antinode.info>

Test mode is now set when a DRBG context is initialised.