- add a workaround provided by Victor Duchovni so that 128- and
  256-bit variants of otherwise identical ciphersuites are treated
  correctly;

- also, correctly skip invalid parts of ciphersuite description strings.

Submitted by: Victor Duchovni, Bodo Moeller

PR: 1490

Submitted by Kees Cook <kees@outflux.net>

- move zlib_stateful_ex_idx initialization to COMP_zlib()

PR: 1468

PR: 1467
Submitted by: Andrei Pelinescu-Onciul <andrei@iptel.org>

PR: 1476

free of those objects

PR: 1461

PR: 1466

PR: 1462
Submitted by: Charles Hardin <chardin@2wire.com>

PR: 1441

PR: 1354, 1355, 1398

PR: 1438

(need to prevent the removal of trailing zero bits).

PR: 1343

PR: 1407
Submitted by: Tomas Mraz <tmraz@redhat.com>

PR: 1435
Submitted by: "Haridharan" <haridharan@gmail.com>

if it's NULL (in case of a malformed pkcs10 request)

PR: 1347
Submitted by: Remo Inverardi <invi@your.toilet.ch>