If an application calls the macro SSL_CTX_get_extra_chain_certs
return either the old "shared" extra certificates or those associated
with the current certificate.

This means applications which call SSL_CTX_use_certificate_chain_file
and retrieve the additional chain using SSL_CTX_get_extra_chain_certs
will still work. An application which only wants to check the shared
extra certificates can call the new macro
SSL_CTX_get_extra_chain_certs_only
(cherry picked from commit a51f7676)

PR#3253

New ctrl sets current certificate based on certain criteria. Currently
two options: set the first valid certificate as current and set the
next valid certificate as current. Using these an application can
iterate over all certificates in an SSL_CTX or SSL structure.
(cherry picked from commit 0f78819c)

(cherry picked from commit f3efeaad)

(cherry picked from commit 88c21c47)

(cherry picked from commit ea131a06)

(cherry picked from commit d80b0eee)

(cherry picked from commit ebd14bfc)

(cherry picked from commit d162584b)

(cherry picked from commit 0a2d5003)

X509_ALGOR_[gs]et0()).

(cherry picked from commit fb0a5208)

suggestions from Pierre Delaage).
(cherry picked from commit 668bcfd5)

Resolved conflicts:

	util/pl/VC-32.pl

Submitted by: Pierre Delaage
(cherry picked from commit a006fef7)

Resolved conflicts:

	crypto/bio/bss_dgram.c
	ssl/d1_lib.c
	util/pl/VC-32.pl

(cherry picked from commit 80c42f3e)

(cherry picked from commit ae007d4d)

(cherry picked from commit 701d593f)

(cherry picked from commit 46a2b338)

(cherry picked from commit 71fa3bc5)

eliminating them as dead code.

Both volatile and "memory" are used because of some concern that the compiler
may still cache values across the asm block without it, and because this was
such a painful debugging session that I wanted to ensure that it's never
repeated.
(cherry picked from commit 7753a3a6)

Add Vector Permutation AES and little-endian support.

Remove reference to ERR_TXT_MALLOCED in the error library as that is
only used internally. Indicate that returned error data must not be
freed.

(cherry picked from commit cb218267)

(cherry picked from commit 717cc858)

PR#3244
(cherry picked from commit 9614d2c6)

Always add a dynamically loaded ENGINE to list. Otherwise it can cause
problems when multiply loaded, especially if it adds new public key methods.
For all current engines we only want a single implementation anyway.
(cherry picked from commit e933f91f)

(cherry picked from commit 46ab9bbd)