Update for OPENSSL_cpu_caps() now being machine independent.

Use the new certificates/chains in regress.

The new certificates are more representative of the real world. The old
certificates use weak algorithms and expire in the very near future. Most
of our r

Use the new certificates/chains in regress.

The new certificates are more representative of the real world. The old
certificates use weak algorithms and expire in the very near future. Most
of our regress has already been switched over, this changes the remainder.

Thanks to Bernhard M. Wiedemann for reminding us of the upcoming expiry.

ok tb@

show more ...

Adjust the ssl_get_shared_ciphers to the new names.

Rename shutdown_all() to shutdown_peers() for consistency.

Modify regress ssl_get_shared_ciphers for portable

- Split out the intermediate path (../certs/) to Makefile
- Change 'shutdown' to 'shutdown_all'

ok tb@

don't set AUTO_RETRY. it's a remnant of an experiment.

A few minor tweaks to make my OCD happy.

Sort headers, unwrap a line, fix grammar in spelling and simplify
the check for test failure.

Print error if SSL_{connect,accept,shutdown}(3) don't run to completion.

Shut down the TLS connections properly.

Include headers used instead of relying on ssl.h pulling in the world.

Merge handshake_loop() into handshake(). There's no benefit in having
this factored into a separate function.

tweak a comment

Add a regress for SSL_get_shared_ciphers() for the change of returned
ciphers in ssl_lib.c r1.240 and TLSv1.3 support in tls13_server.c r1.69.

requested by jsing