Joe Orton

``` Merge r1825124 from trunk: Follow-up to r1825120: * modules/ssl/ssl_engine_init.c (ssl_init_ca_cert_path): Since SSL_add_file_cert_subjects_to_stack() internally replaces the comparison callback with one equivalent to ssl_init_FindCAList_X509NameCmp, there's no point in using that here....

``` Fail Digest challenge if the client nonce can't be created either due to PRNG failure (with-SSL case) or hash failure (non-SSL case). * src/ne_auth.c (get_cnonce): Simplify #if structure and...

``` * src/ne_basic.c (ne_getbuf), * src/ne_basic.h (ne_getbuf): New function. * test/basic.c (getbuf, getbuf2): New tests. * test/common/child.c (new_spawn_server2): Close listening socket once last accept() is done. ```

- respect EXTRA_CFLAGS during build - add CI config to run with -Werror

``` * file_io/unix/pipe.c (file_pipe_create): Use pipe2(,O_NONBLOCK) by default unless APR_FULL_BLOCK was used; unconditionally set the blocking state later. Saves two syscalls per invocation for both APR_READ_BLOCK and APR_WRITE_BLOCK, no [intended]...