Put ECCdraft ciphersuites back into default build (but disabled
unless specifically requested)

the BN library more generally useful.

Submitted by: Douglas Stebila

Also, change the default ciphersuite to give some prefererence to
ciphersuites with forwared secrecy (rather than using a random order).

and allow more general RSA OIDs for ECC certs with RSA CA sig.

make sure 'mask' is initialized in ssl_cipher_get_disabled().

Also simplify code by removing some unused arguments in static functions.

the Fortezza stuff

ciphersuites in the default cipher string.

keygen API: make sure that 'pkey_type' is actually visible to MAIN().

Submitted by: Masashi Fujita
Reviewed by: Bodo Moeller

Submitted by: Masashi Fujita
Reviewed by: Bodo Moeller

Submitted by: Masashi Fujita
Reviewed by: Bodo Moeller

coding it to "sha1".

eay licence, as module is practically rewritten from scratch [well,
even original submission was obviously "almost, but not quite,
entirely unlike" any other eay *_cfb.c module, not to mention new
functions].

and ENGINE is destroyed.

Add missing prototypes.

Fix engine method lookup.

implementations and functional reference counting when a context
is allocated, free or copied.