PR: 3271
(cherry picked from commit 65370f9b)

Don't set the fips flags in cipher and digests as the implementations
aren't suitable for FIPS mode and will be redirected to the FIPS module
versions anyway.

Return EVP_CIPH_FLAG_FIPS or EVP_MD_FLAG_FIPS if a FIPS implementation
exists when calling EVP_CIPHER_flags and EVP_MD_flags repectively.

Remove unused FIPS code from e_aes.c: the 1.0.2 branch will never be
used to build a FIPS module.

The file evp_fips.c isn't used in OpenSSL 1.0.2 as FIPS and non-FIPS
implementations of algorithms can coexist.

(cherry picked from commit 4ca02656)

(cherry picked from commit b62a4a1c)

(cherry picked from commit ce876d83)

(cherry picked from commit f861b1d4)

(cherry picked from commit fd361a67)

[but don't let it mask make's].

PR: 3269

PR: 3165

(cherry picked from commit ffcc832ba6e17859d45779eea87e38467561dd5d)

(cherry picked from commit d49135e7)

(cherry picked from commit 147cca8f)

(cherry picked from commit 7bb9d84e)

PR: 3201
(cherry picked from commit 03da57fe)

(cherry picked from commit e704741b)

Not all platforms define BN_ULLONG. Define SCTS_TIMESTAMP as a type
which should work on all platforms.

Windows 8 SDKs complain that GetVersion() is deprecated.

We only use GetVersion like this:

	(GetVersion() < 0x80000000)

which checks if the Windows version is NT based. Use a macro check_winnt()
which uses GetVersion() on older SDK versions and true otherwise.
(cherry picked from commit a4cc3c80)

(cherry picked from commit 19f65ddb)

Allegedly formwarding to NUL: sometimes creates NUL file in file
system.

PR: 3250
(cherry picked from commit 63aff300)

PR: 3251
Suggested by: Thorsten Schning
(cherry picked from commit 779c51c6)

when adding duplicates in add_cert_dir.

PR: 3261
Reported by: Marian Done
(cherry picked from commit 758954e0)

(cherry picked from commit d099f0ed)

When setting the current certificate check that it has a corresponding
private key.
(cherry picked from commit 358d352a)

New flags to build certificate chains. The can be used to rearrange
the chain so all an application needs to do is add all certificates
in arbitrary order and then build the chain to check and correct them.

Add verify error code when building chain.

Update docs.
(cherry picked from commit 13dc3ce9)