Allow CCS after finished has been sent by client: at this point
keys have been correctly set up so it is OK to accept CCS from
server. Without this renegotiation can sometimes fail.

PR#3400
(cherry picked from commit 99cd6a91fcb0931feaebbb4832681d40a66fad41)

(cherry picked from commit ce00c64d)

compiler supports it.  Otherwise, there are warnings about it lacking
everywhere, which is quite tedious to read through while trying to check
for other warnings.

Partly provided by Zoltan Arpadffy <arpadffy@polarhome.com>

PR: 3405
(cherry picked from commit 91a6bf80)

PR: 3405
(cherry picked from commit c9cf29cc)

Based on an original patch by Joel Sing (OpenBSD) who also originally identified the issue.

This reverts commit 728bd41a.

Missing attribution.

A client reference identity of ".example.com" matches a server
certificate presented identity that is any sub-domain of "example.com"
(e.g. "www.sub.example.com).

With the X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS flag, it matches
only direct child sub-domains (e.g. "www.sub.example.com").
(cherry picked from commit e52c52f10bb8e34aaf8f28f3e5b56939e8f6b357)

In the ssl_cipher_get_evp() function, fix off-by-one errors in index validation before accessing arrays.

PR#3375

Fix SEH and stack handling in Win64 build.
(cherry picked from commit 977f32e8)

Partly provided by Zoltan Arpadffy <arpadffy@polarhome.com>

(cherry picked from commit 77a27a50)

(cherry picked from commit 7239a09c7b5757ed8d0e9869f3e9b03c0e11f4d1)

(cherry picked from commit 1cf8f57b)

(cherry picked from commit 619b9466)

(cherry picked from commit fd2309aa)

(cherry picked from commit 82741e9c)

Result of joint effort with Ard Biesheuvel.
(cherry picked from commit 2d5a799d)

Submitted by: Ard Biesheuvel.
(cherry picked from commit cd91fd7c)

(cherry picked from commit f8aab617)

(cherry picked from commit ddb6b965)

armcap.c is shared between 32- and 64-bit builds and features link-time
detection of getauxval.

Submitted by: Ard Biesheuvel.
(cherry picked from commit e8d93e34)

(cherry picked from commit e2eabed1)

Pointer out and suggested by: Ard Biesheuvel.
(cherry picked from commit 5dcf70a1)

(cherry picked from commit 72346328)

(cherry picked from commit 797d24be)

sha/asm/sha256-armv4.pl: add ARMv8 code path.
(cherry picked from commit 9250a306)