Add TLS padding extension to SSL_OP_ALL so it is used with other
"bugs" options and can be turned off.

This replaces SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG which is an ancient
option referring to SSLv2 and SSLREF.

PR#3336

OS X 10.8..10.8.3 has broken support for ECDHE-ECDSA ciphers.

initial connection to unpatched servers. There are no additional security
concerns in doing this as clients don't see renegotiation during an
attack anyway.

Initial secure renegotiation documentation.

(This were in 0.9.7-stable and 0.9.8-stable, but not in HEAD so far.)

PR: 538

Submitted by: Richard.Koenning@fujitsu-siemens.com
Reviewed by:
PR: 129

vulnerability workaround (included in SSL_OP_ALL).

PR: #90

options someone much longer working with OpenSSL/SSLeay is needed.