PR#3272

PR#3412

PR#2531

PR#3173

If CSR verify fails in ca utility print out error messages.
Otherwise some errors give misleading output: for example
if the key size exceeds the library limit.

PR#2875

Update protocols supported and note that SSLv2 is effectively disabled
by default.

PR#3184

Tolerate BER length encoding which may include leading zeroes.

PR#2746

PR#3107

Some state strings were erronously not compiled when no-ssl2
was set.

PR#3295

PR#3141

PR#3174

In EVP_PBE_alg_add don't use the underlying NID for the cipher
as it may have a non-standard key size.

PR#3206

PR#3014

PR#2800

PR#2783

PR#3374

Document that the certificate passed to SSL_CTX_add_extra_chain_cert()
should not be freed by the application.

PR#3409

OIDs with one component don't have an encoding.

PR#2556 (Bug#1)

PR#3403

PR#3410

This ensures high performance is situations when assembler supports
AVX2, but not AD*X.

This is to compensate for higher aes* instruction latency on Cortex-A57.