http://cvs.openssl.org/chngview?cn=16696
Ensure the ticket expected flag is reset when a stateless resumption is successful.

Submitted by: steve

  http://cvs.openssl.org/chngview?cn=16695
New unused field crippled ssl_ctx_st in 0.9.8"f".

Submitted by: appro

  http://cvs.openssl.org/chngview?cn=16694
Don't let DTLS ChangeCipherSpec increment handshake sequence number. From HEAD with a twist: server interoperates with non-compliant client.
PR: 1587
Submitted by: appro

  http://cvs.openssl.org/chngview?cn=16691
Don't try to lookup zero length session.
PR: 1591
Submitted by: steve

  http://cvs.openssl.org/chngview?cn=16682
Copy bn/asm/ia64.S from HEAD.
PR: 1594
Submitted by: appro

  http://cvs.openssl.org/chngview?cn=16674
Avoid shadow and signed/unsigned warnings.

Submitted by: steve

stable'.

Submitted by: Alex Lam

twist: server interoperates with non-compliant pre-0.9.8f client.

server interoperates with non-compliant pre-0.9.8f.

twist: server allows for non-compliant Finished calculations in order to
enable interop with pre-0.9.8f.

HelloVerifyRequest [from HEAD].

server accepts even non-compliant encoding in order to enable interop with
pre-0.9.8f clients.

PR: 1578
Submitted by: Charles Longeau <chl@tuxfamily.org>

- no need to disable SSL 2.0 for SSL_CTRL_SET_TLSEXT_HOSTNAME
  now that ssl23_client_hello takes care of that

- fix buffer overrun checks in ssl_add_serverhello_tlsext()

resolve the Valgrind issue with random numbers. Undo the changes to
RAND_bytes() and RAND_pseudo_bytes() that are redundant in this
respect.
Update documentation and FAQ accordingly, as the PURIFY macro is
available at least since 0.9.7.

PR: 521

contents of "buf" when calling RAND_*bytes().

buffer can be normally used.