Submitted by: steve@openssl.org

Add support for custom headers in OCSP requests.

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Approved by: steve@openssl.org

Fix DTLS cookie management bugs.

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Approved by: steve@openssl.org

DTLS timeout handling fix.

s_client, s_server.

Submitted by: Daniel Black <daniel.subs@internode.on.net>

PR: 1672

(draft-rescorla-tls-opaque-prf-input-00.txt), and do some cleanups and
bugfixes on the way.  In particular, this fixes the buffer bounds
checks in ssl_add_clienthello_tlsext() and in ssl_add_serverhello_tlsext().

Note that the opaque PRF Input TLS extension is not compiled by default;
see CHANGES.

for OpenSSL.

on failure. Keep output format consistent with previous versions.

Also flush stdout after printing ACCEPT in s_server.

Submitted by: Tracy Camp <tracyx.e.camp@intel.com>

PR: 1312
Submitted by: Oliver Tappe <zooey@hirschkaefer.de>
Reviewed by: Ulf Moeller

soon-to-be-widely-deployed implementation that doesn't support the
previous default)

Submitted by: Douglas Stebila

PR: 1191
Submitted by: Mika Kousa and Pasi Eronen of Nokia Corporation
Reviewed by: Nils Larsch

Submitted by: Peter Sylvester

Submitted by: Peter Sylvester