Contributed by: Florian Weimer <fweimer@redhat.com>

Fixes to X509 hostname and email address checking. Wildcard matching support.
New test program and manual page.

to the SSL_CONF APIs.

This is complicated a little because the SSL_CTX structure is not available
when the command line is processed: so just check syntax of commands initially
and store them, ready to apply later.

Submitted by: David Miller, Andy Polyakov

vpaes-x86_64.pl: minor performance squeeze.

vpaes-x86.pl: minor performance squeeze.

new feature: if ctx==NULL in SSL_CTX_ctrl perform syntax checking only for some operations (currently curves and signature algorithms)

previous cbc128.c commit].

leave comment about CTR mode.