Remove commented out code and fix indentation of surrounding statements.

Remove handling for SSLv2.

Use prime256v1 for tests unless otherwise specified.

remove e_os2.h includes
ok jsing@

Remove SSLv3 support from LibreSSL regression tests.

Reject DH keys sent by a server if they are considered too small; inspired
by a similar BoringSSL change, but raising the limit to 1024 bits.
ok jsing@ markus@ guenther@ deraadt@

unifdef OPENSSL_NO_NEXTPROTONEG

Add regress for ALPN.

Based on OpenSSL.

The -ssl2 flag does nothing - remove the flag and any tests that were
using it.

Remove _XOPEN_SOURCE_EXTENDED since we're not too concerned about
gethostname being declared properly on Compaq platforms that use DEC C...

BIO_free() and SSL_CTX_free() have explicit NULL checks, so there is no
need to have additional checks here.

Add NPN regress tests from OpenSSL. However, unlike OpenSSL, actually exit
with a failure if the NPN verification fails.

More KNF.

Remove #ifndefs for OPENSSL_NO_DH, OPENSSL_NO_ECDH and
OPENSSL_NO_X509_VERIFY. We're not going to build with these and the same
removal has already been done for libssl.

Remove PSK from the ssl regress.

Uncompress ssltest.

Add DTLS support to ssltest and wire up some regress tests.

ok miod@

Remove support for the `opaque PRF input' extension, which draft has expired
7 years ago and never made it into an RFC. That code wasn't compiled in
anyway unless one would define the actual on-the-w

Remove support for the `opaque PRF input' extension, which draft has expired
7 years ago and never made it into an RFC. That code wasn't compiled in
anyway unless one would define the actual on-the-wire extension id bytes;
crank libssl major.

With help and enlightenment from Brendan MacDonell.

show more ...

Build with WARNINGS=Yes and Werror.

Move ssltest.c to a regress test.