used compression algorithms in client hello (a legacy from when
the compression algorithm wasn't serialized with SSL_SESSION).

PR: 2130
Submitted by: Eugeny Gostyukhin

compilation in e_capi.c.
PR: 2113

ppc64-mont.pl: clarify comment and fix spelling.

for kind of installation suggested in ticket #2003 from August. What it
effectively does now, is arrange pre-configured default $libdir value.
Note that it also fixes ENGINESDIR, i.e. harmonizes it with install path.

just like a "real" server making it easier to trace any problems.

MCSV is now called SCSV.

Don't send SCSV if renegotiating.

Also note if RI is empty in debug messages.

ppc64-mont.pl: missing predicate in commentary.

Add Triple DES CFB1 and CFB8 to algorithm list and NID translation.

Submitted by: Martin Rex

Submitted by: Tomas Mraz <tmraz@redhat.com>

Check for lookup failures in EVP_PBE_CipherInit().

RI.

Reorganise RI checking code and handle some missing cases.

Initial secure renegotiation documentation.

Submitted by: Jan Pechanec <Jan.Pechanec@Sun.COM>

Check for memory allocation failures.

Change RI ctrl so it doesn't clash.

work in SSLv3: initial handshake has no extensions but includes MCSV, if
server indicates RI support then renegotiation handshakes include RI.

NB: current MCSV value is bogus for testing only, will be updated when we
have an official value.

Change mismatch alerts to handshake_failure as required by spec.

Also have some debugging fprintfs so we can clearly see what is going on
if OPENSSL_RI_DEBUG is set.

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>

Add extension support to DTLS code mainly using existing implementation for
TLS.

Submitted by: Martin Olsson <molsson@opera.com>

Check for bn_wexpand errors in bn_mul.c