between NIDs and the more common NIST names such as "P-256". Enhance
ecparam utility and ECC method to recognise the NIST names for curves.
(backport from HEAD)

structure.

Before this the only way to add a custom chain was in the parent SSL_CTX
(which is shared by all key types and SSL structures) or rely on auto
chain building (which is performed on each handshake) from the trust store.
(backport from HEAD)

Backport: Revise ssl code to use CERT_PKEY structure when outputting a certificate chain (from HEAD)

PR: 2778

Submitted by: John Fitzgibbon <john_fitzgibbon@yahoo.com>

Time is always encoded as 4 bytes, not sizeof(Time).

PR: 2780

PR: 2775

PR: 2761
Submitted by: Corinna Vinschen

PR: 2776

Fix memory leaks in 'goto err' cases.

'OpenSSL_1_0_2-stable'.

the old code came from SSLeay days before TLS was even supported.

PR: 2435,2440

continue with symmetric decryption process to avoid leaking timing
information to an attacker.

Thanks to Ivan Nestlerode <inestlerode@us.ibm.com> for discovering
this issue. (CVE-2012-0884)

Submitted by: Dmitry Belyavsky <beldmit@gmail.com>

CMS support for ccgost engine

Add more extension names in s_cb.c extension printing code.

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>

Fix DTLS timeout handling.