This commit handles BIO_ACCEPT_free BIO_CB_FREE BIO_CONNECT_free
BIO_free BIO_free_all BIO_vfree
Reviewed-by: NMatt Caswell <matt@openssl.org>

Reviewed-by: NMatt Caswell <matt@openssl.org>

X509_V_FLAG_NO_ALT_CHAINS flag. Using this option means that when building
certificate chains, the first chain found will be the one used. Without this
flag, if the first chain found is not trusted then we will keep looking to
see if we can build an alternative chain instead.
Reviewed-by: NDr. Stephen Henson <steve@openssl.org>

Reviewed-by: NTim Hudson <tjh@openssl.org>

If SSLv2 and SSLv3 are both disabled we still support SSL/TLS.
Reviewed-by: NRichard Levitte <levitte@openssl.org>

Reviewed-by: NDr. Stephen Henson <steve@openssl.org>

PR#3612
Reviewed-by: NDr. Stephen Henson <steve@openssl.org>

PR#3107

Add -trusted_first description to help messages and man pages
of tools that deal with certificate verification.

Keep copy of any host, path and port values allocated by
OCSP_parse_url and free as necessary.

Add the extension parser in the s_client, ocsp and x509 apps.

Don't verify our own responses.

Recognise verification arguments.

Submitted by: steve@openssl.org

Add support for custom headers in OCSP requests.

define _XOPEN_SOURCE_EXTENDED to reach fd_set and timeval types and
functionality.

OPENSSL_NO_DEPRECATED, etc. Steve, please double-check the CMS stuff...

Submitted by: Guenter Knauf <eflash@gmx.net>

Use default algorithms for OCSP request and response signing. New command
line option to support other digest use for OCSP certificate IDs.

Revert change in 1516 because it breaks Windows build. Use a modified version
of the headers from s_client.c which has used similar functionality without
any problems.