SHA512_Transform was initially added rather as tribute to tradition
than for practucal reasons. But use was recently found in ssl/s3_cbc.c
and it turned to be problematic on platforms that don't tolerate
misasligned references to memory and lack assembly subroutine.
(cherry picked from commit cdd1acd7)

Partial mitigation of PR#3200
(cherry picked from commit 0294b2be)

(cherry picked from commit 9b3d7570)

Conflicts:

	crypto/x509/x509_vpm.c

Move the IP, email and host checking fields from the public
X509_VERIFY_PARAM structure into an opaque X509_VERIFY_PARAM_ID
structure. By doing this the structure can be modified in future
without risk of breaking any applications.

For consistency with other cases if we are performing
partial chain verification with just one certificate
notify the callback with ok==1.

New functions to retrieve internal pointers to X509_VERIFY_PARAM
for SSL_CTX and SSL structures.

We need to lock when *not* in FIPS mode.

(cherry picked from commit d1671f4f)

Add MULX/AD*X code paths and optimize even original code path.

(cherry picked from commit 667053a2)

(cherry picked from commit 41965a84)

PR: 3176.

In FIPS mode ssleay_rand_bytes is only used for PRNG seeding and is
performed in either a single threaded context (when the PRNG is first
initialised) or under a lock (reseeding). To avoid multiple locks disable
use of CRYPTO_LOCK_RAND in FIPS mode in ssleay_rand_bytes.

PR: 3189
Submitted by: Oscar Ciurana
(cherry picked from commit c5d5f5bd)

(cherry picked from commit 8bd7ca99)

rsaz_exp.c: harmonize line terminating;
asm/rsaz-*.pl: minor optimizations.
asm/rsaz-x86_64.pl: sync from master.
(cherry picked from commit 31ed9a21)

(cherry picked from commit 6efef384)

New functions to retrieve current certificate or private key
from an SSL_CTX.

Constify SSL_get_private_key().
(cherry picked from commit a25f9adc)

(cherry picked from commit 60aeb187)

(cherry picked from commit fdeaf55b)

PR#3106

If pointer comparison for current certificate fails check
to see if a match using X509_cmp succeeds for the current
certificate: this is useful for cases where the certificate
pointer is not available.
(cherry picked from commit 6856b288a6e66edd23907b7fa264f42e05ac9fc7)

PR#3169

This patch, which currently applies successfully against master and
1_0_2, adds the following functions:

SSL_[CTX_]select_current_cert() - set the current certificate without
disturbing the existing structure.

SSL_[CTX_]get0_chain_certs() - get the current certificate's chain.

SSL_[CTX_]clear_chain_certs() - clear the current certificate's chain.

The patch also adds these functions to, and fixes some existing errors
in, SSL_CTX_add1_chain_cert.pod.
(cherry picked from commit 2f56c9c015dbca45379c9a725915b3b8e765a119)

PR#3172
(cherry picked from commit 4f055e34c3598cad00fca097d812fa3e6436d967)

PR: 3165
Submitted by: Daniel Richard G.
(cherry picked from commit 2df9ec01)