[openssl-project] To use or not use the iconv API, and to use or not use other libraries

[Salz, Rich]

>    My main concern is that currently, openssl pkcs12 may create broken pkcs12 files (because it misinterprets the pass phrase when constructing a BMPString), and doesn't notify the user at all (doesn't even check). 
 

For those who haven't reada the PR and all its comments, I propose that we reject non-ASCII input unless one of two flags is set.  This prevents us from unknowingly making the situation worse, and does not break interop with our installed base.