Submitted by: Alexey Melnikov <alexey.melnikov@isode.com>

Only create ex_data indices once for CAPI engine.

Submitted by: Tomas Mraz <tmraz@redhat.com>

Check return codes for load_certs_crls.

Thanks to Antonio Martin, Enterprise Secure Access Research and
Development, Cisco Systems, Inc. for discovering this bug and
preparing a fix. (CVE-2012-0050)

PR: 2613
Submitted by: Leena Heino

are passed zero-extended, not sign-extended [from HEAD].
PR: 2682

PR: 2675
Submitted by: Annie Yousar

PR: 2678
Submitted by: Annie Yousar

PR: 2685

Submitted by: Brian Carlstrom

Reviewed by: steve

Fix for DTLS plaintext recovery attack discovered by Nadhem Alfardan and
Kenny Paterson.

Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576) [include source patch this time!]

Reviewed by: steve

Fix memory leaks.

Submitted by: Tianjie Mao <tjmao@tjmao.net>
Reviewed by: steve

Fix incorrect comma expressions and goto f_err as alert has been set.

Submitted by: Paul Green <Paul.Green@stratus.com>
Reviewed by: steve

Improved PRNG seeding for VOS.

PR: 2648

 be the server FQDN: change it.
[Reported by PSW Group]

methods isn't presorted, it will be sorted on first read).

Submitted by: Adam Langley

Submitted by: Emilia Kasper

Submitted by: Adam Langley
Reviewed by: Bodo Moeller

PR: 2636
Submitted by: Charles Bryant