unbound: log openssl-1.0.2 lacks TLS host verification

ssl_set1_host() is not available without openssl-1.1.0. Unbound can not do
host cert verification. DNS over TLS connects, but hosts are unverified. A
patch for log err is added with a noitce in README.md.
(see: https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=658)

Also, squash some minor robustness and TLS usability fixes.

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

net/unbound/files/dnsmasq.sh

@@ -80,7 +80,7 @@ create_host_record() {
 
 
     case $ip in
-      fe80:*|169.254.*)
+      fe[89ab][0-9a-f]:*|169.254.*)
         debug_ip="$ip@$host"
         ;;