enable them, like FIPS and JPAKE need to have these set when building
dependencies.

with OPENSSL_EXPERIMENTAL_FOO around it. Make JPAKE experimental.

Submitted by: Philip Prindeville <philipp_subx@redfish-solutions.com>
Approved by: steve@openssl.org

Submitted by: David North

PR: 1663

to s_client application.
PR: #1761
Submitted by: David Woodhouse <dwmw2@infradead.org>

Submitted by: Alex Chen <alex_chen@filemaker.com>

Submitted by: Alex Chen <alex_chen@filemaker.com>

length, so a _single_ pair of packets getting switched around would
cause one of them to be 'dropped'.

Secondly, it wasn't even _dropping_ the offending packets, in the
non-blocking case. It was just returning garbage instead.
PR: #1752
Submitted by: David Woodhouse <dwmw2@infradead.org>

offending record queued as 'pending'. The DTLS code doesn't expect this,
and we end up hitting an OPENSSL_assert() in do_dtls1_write().

The simple fix is just _not_ to leave it queued. In DTLS, dropping
packets is perfectly acceptable -- and even preferable. If we wanted a
service with retries and guaranteed delivery, we'd be using TCP.
PR: #1703
Submitted by: David Woodhouse <dwmw2@infradead.org>