298 424 656 882 939 1630 1807 2263 2294 2311 2424 2623
    2637 2686 2697 2921 2922 2940 3055 3112 3156 3177 3277

ERR_get_error(3) references the non-existent
ERR_get_last_error_line_data instead of the one that does exist,
ERR_peek_last_error_line_data.

PR#3283

Primitive encodings shouldn't use indefinite length constructed
form.

PR#2438 (partial).

PR#2706 though patch is from PR#3366.

(cherry picked from commit 2db3ea29)

Conflicts:
	ssl/t1_lib.c

(cherry picked from commit c97ec563)

Test EVP_CIPHER_CTX_copy in evp_test. This will catch any
problems with copying in underlying ciphers.

Internal pointers in CCM, GCM and XTS contexts should either be
NULL or set to point to the appropriate key schedule. This needs
to be adjusted when copying contexts.

We can't unfortunately print the CMAC cipher used without extending the API.

PR#2579

IN parameter.

Under the old docs, the only thing stated was "at most
EVP_PKEY_size(pkey) bytes will be written". It was kind of misleading
since it appears EVP_PKEY_size(pkey) WILL be written regardless of the
signature's buffer size.

PR#3272

PR#3412

PR#2531

PR#3173

If CSR verify fails in ca utility print out error messages.
Otherwise some errors give misleading output: for example
if the key size exceeds the library limit.

PR#2875

Update protocols supported and note that SSLv2 is effectively disabled
by default.

PR#3184

Tolerate BER length encoding which may include leading zeroes.

PR#2746