Fix double-free in TLS server name extensions which could lead to a remote
crash found by Codenomicon TLS test suite (CVE-2008-0891)

Reviewed by: openssl-security@openssl.org

Obtained from: jorton@redhat.com

about "overcommenting".

PR: 1417, 1513
Submitted by: Erik de Castro Lopo <mle+openssl@mega-nerd.com>

from the OpenSSL distribution.

Submitted by: Ben Laurie <ben@links.org>

Submitted by: Ivan Nestlerode <inestlerode@us.ibm.com>
Reviewed by: steve

ptr members.

(So if the id_callback is bogus, we still have &errno.)

(Buggy line reported by Matthias Koenig.)

Submitted by: Daniel Black <daniel.subs@internode.on.net>

PR: 1672

complaint related to the PRNG: with PURIFY policy don't feed uninitialized
memory into the PRNG.

Submitted by: Bodo Moeller <bmoeller@openssl.org> :-)

Add a -certsout option to output any certificates in a message.

Add test for example 4.11

ticket #1668).

PR: 1668
Submitted by: Ian Lister
Reviewed by: Geoff Thorpe

where they both use the same limb size. I've tweaked his patch slightly, so
blame me if it breaks.

Submitted by: Paul Sheer
Reviewed by: Geoff Thorpe