PR#2706 though patch is from PR#3366.

(cherry picked from commit 2db3ea29)

Conflicts:
	ssl/t1_lib.c

(cherry picked from commit c97ec563)

Test EVP_CIPHER_CTX_copy in evp_test. This will catch any
problems with copying in underlying ciphers.

Internal pointers in CCM, GCM and XTS contexts should either be
NULL or set to point to the appropriate key schedule. This needs
to be adjusted when copying contexts.

We can't unfortunately print the CMAC cipher used without extending the API.

PR#2579

IN parameter.

Under the old docs, the only thing stated was "at most
EVP_PKEY_size(pkey) bytes will be written". It was kind of misleading
since it appears EVP_PKEY_size(pkey) WILL be written regardless of the
signature's buffer size.

PR#3272

PR#3412

PR#2531

PR#3173

If CSR verify fails in ca utility print out error messages.
Otherwise some errors give misleading output: for example
if the key size exceeds the library limit.

PR#2875

Update protocols supported and note that SSLv2 is effectively disabled
by default.

PR#3184

Tolerate BER length encoding which may include leading zeroes.

PR#2746

PR#3107

Some state strings were erronously not compiled when no-ssl2
was set.

PR#3295

PR#3141