(draft-rescorla-tls-opaque-prf-input-00.txt), and do some cleanups and
bugfixes on the way.  In particular, this fixes the buffer bounds
checks in ssl_add_clienthello_tlsext() and in ssl_add_serverhello_tlsext().

Note that the opaque PRF Input TLS extension is not compiled by default;
see CHANGES.

(engines/ccgost/ remains utter chaos, though; "make errors" is not happy.)

PR: 1529

PR: 1575

to shut down Winsock unless we know it won't be used [and we never do].
PR: 1439

PR: 1381

PR: 1456

Fix additional gcc 4.2 value not used warnings.

and cast from pointer to int of different size (linux-x86_64 and align).

On x86 it gives same performance, while code size shrinks >10 times.

Submitted by: Victor B. Wagner <vitus@cryptocom.ru>