clone-bundles: add a basic first version of automatic bundle generation See inline documentation for details.

branching: merge stable into default

Added signature for changeset 83ea6ce48b4f

Added tag 6.4.1 for changeset 83ea6ce48b4f

relnotes: add 6.4.1

sslutil: set context security level for legacy tls testing (issue6760) Current versions of OpenSSL do not allow the use of TLS <1.2 when the library's security level is >=1 (1 being the default on most distributions). Setting the security level in addition to the minimum protocol is therefore necessary for the legacy protocol tests. This is done here ONLY when testing, when: - explicitly setting the cipher string, or - using the "--insecure" flag, or - using the "devel.serverexactprotocol" testing option. See: https://github.com/openssl/openssl/blob/master/NEWS.md#major-changes-between-openssl-30-and-openssl-310-14-mar-2023

configitems: make devel.serverexactprotocol look dangerous Because it is.

rebase: do not cleanup the working copy when --dry-run is used (issue6802) Since we did not touch the working copy, we don't need to clean it up. This will avoid wiping exiting changes out.

rebase: add a test showing that --dry-run wipes working copy changes Eating people's data on --dry-run seems like a bad idea.

tests: automatically glob the discovery timing information Time is not stable in tests.