note about OpenSSL being more liberal than OpenLDAP when there is garbage past the end of a certificateList

assume some external process will tell us when network is on/offline

loop saving malloced data is run at least once.

Parse args correctly and free up memory.
Also set some lengths=0 and remove unneeded ptr==NULL tests before frees.

Reject indefinite-length format in ber_skip_tag().  localize *len.
Reject broken and too large bitstrings in ber_get_bitstringa().
Simplify a number of functions somewhat - no functionality changes.
Remove unnecessary tests and ber_tag updates after ber_skip_tag().

Speedup & less memory allocation:
  Simplify the work to encode tag, length, integer/enum, sequence/set.
  Drop struct seqorset and allocations of it.  Replace BerElement.ber_sos.
  Drop ber_write(,,,nonzero) support. Callers, if any, need to be rewritten.
  Make ber_log_sos_dump() and ber_sos_dump() stubs, they could no longer work.
Fix ber_write() buffer overrun after ber_start_seqorset().
Check overflow and max sizes, e.g. for functions returning int size.
Some cleanup, and handwaves in the direction of supporting CHAR_BIT>8.
Add/fix comments and a few descriptive types/macros.

In syncrepl, assume consumer pointing to same server but different
searchbase is OK otherwise ignore config.

futile searches for OC matches.