Update to upstream version '1.28'
with Debian dir d86c8829949fef38208cdacad6cfd6b34bcafb76

this enables adding new properties while not breaking the interface.

Due to openssl-3 compatibility, thanks to t0b3

make nss happy with its own extensions and non-standard behavior.

Starting from version 1.1.1, OpenSSL includes routines
like RSA_meth_xxx and DSA_meth_xxx. pkcs11-helper includes
implementation of those routines. That code is compiled if
they're missing from OpenSSL.

nmake build uses pre-generated config-w32-vc.h, which lacks
defines which indicate that OpenSSL includes above routines,
which causes pkcs11's own implementaion to be compiled. However,
pkcs11-helper implementation is not compatible with OpenSSL 1.1.1 -
for example, it takes size of opaque struct RSA_METHOD, which
has become internal in OpenSSL.

This adds necessary defines to config header used by nmake build
so that pkcs11-helper code, which is not compatible with OpenSSL 1.1.1,
is not compiled.

Also libeay is changed to libcrypto.

Signed-off-by: Lev Stipakov <lev@openvpn.net>

Add additional API that allows passing of the mechanism
struct instead of just the mechanism type to private key
operations. This is needed to support paddings
schemes such as PSS that require additional entries in the
CK_MECHANISM structure.

No change in functionality.

Signed-off-by: Selva Nair <selva.nair@gmail.com>

Signed-off-by: Selva Nair <selva.nair@gmail.com>

This changes removes polarssl compatibility.

Signed-off-by: Simon Rozman <simon@rozman.si>

Update to upstream version '1.27'
with Debian dir e9d980566e769405238ab4d21f3e74002b7e243e