Add support for separate verify and chain stores in s_client.

Make ASN1_UTCTIME_cmp_time_t more robust by using the new time functions.

PR: 2909

Update test cases to cover internal error return values.

Remove IDNA wildcard filter.

Submitted by: Dmitry Belyavsky <beldmit@gmail.com>

Fix DH double free if parameter generation fails.

Submitted by: Florian Weimer

Submitted by: "Florian Rüchel" <florian.ruechel@ruhr-uni-bochum.de>

Correctly handle local machine keys in the capi ENGINE.

Contributed by: Florian Weimer <fweimer@redhat.com>

Fixes to X509 hostname and email address checking. Wildcard matching support.
New test program and manual page.