Typo fix in comment.
Added discard of unread appdata on explicit close.
Added support for CCM and CCM_8 cipher suites.
Added seeder API. Also overhauled compile-time detection of features.
Fixed behaviour in case of rejected renegotiation.
Added implementation of keying material export (RFC 5705) (API for PRF implementations changed, to handle chunked seeds).
Fixed handling of incoming application data after sending a close_notify (data shall be discarded silently, not trigger an error). Also fixed a couple of bugs in the command-line test tool.
Added API for external hashing of ServerKeyExchange, and signature algorithm identifiers in the 0x080* format (preparatory steps for EdDSA support).
Fixed scheduling error (jumping back to failed engine, could lead to segfault).
Added ChaCha20+Poly1305 support (stand-alone, cipher suites).
Added flag to prohibit renegotiations.
Added support for ClientHello padding (RFC 7685) and fixed buffering bug.
Initial import.