(which are pointless, but still might occur)

(draft-rescorla-tls-opaque-prf-input-00.txt), and do some cleanups and
bugfixes on the way.  In particular, this fixes the buffer bounds
checks in ssl_add_clienthello_tlsext() and in ssl_add_serverhello_tlsext().

Note that the opaque PRF Input TLS extension is not compiled by default;
see CHANGES.

(engines/ccgost/ remains utter chaos, though; "make errors" is not happy.)

PR: 1529

PR: 1575

to shut down Winsock unless we know it won't be used [and we never do].
PR: 1439

PR: 1381

PR: 1456