s390x assembler pack in CHANAGES.

Until now it was xor between CBC residue and 1st block from last datagram,
or in other words still predictable.

HelloVerifyRequest.

no status is notified even if no server extensions are present.

developers responsible for -march choice.

PR: 1578
Submitted by: Charles Longeau <chl@tuxfamily.org>

(which are pointless, but still might occur)

(draft-rescorla-tls-opaque-prf-input-00.txt), and do some cleanups and
bugfixes on the way.  In particular, this fixes the buffer bounds
checks in ssl_add_clienthello_tlsext() and in ssl_add_serverhello_tlsext().

Note that the opaque PRF Input TLS extension is not compiled by default;
see CHANGES.

(engines/ccgost/ remains utter chaos, though; "make errors" is not happy.)