* Add $ssl_verify_partial_chains option for OpenSSL. (closes #3916)
* Move the OpenSSL partial chain support check inside configure.ac. (see #3916)
* Don't allow storing duplicate certs for OpenSSL interactive prompt. (closes #3914)
* Prevent skipped certs from showing a second time. (see #3916)
* OpenSSL: Don't offer (a)ccept always choice for hostname mismatches. (closes #3914)
closes #429
closes #459