New -pkcs12 option to CA.pl.
Document CA.pl script.
Initialise and free up the extra DH fields
(nothing uses them yet though).

New function BN_pseudo_rand().
Use BN_prime_checks_size(BN_num_bits(w)) rounds of Miller-Rabin when
generating DSA primes (why not use BN_is_prime()?)

Clean up bn_mont.c.

Tidy up CRYPTO_EX_DATA structures.

Update docs.

Add new program dhparam and update docs.

Gets Lutz Jaenicke's name right this time :-)

Apologies to both concerned.

minor changes.

Docs haven't been added at this stage. They are probably
best included in the 'ciphers' program docs.

serial numbers.

as a shared library without RSA.  Use #ifndef NO_SSL2 instead of
NO_RSA in ssl/s2*.c.

Submitted by: Kris Kennaway <kris@hub.freebsd.org>
Modified by Ulf Möller

are not guaranteed to be unpredictable.

returns int (1 = ok, 0 = not seeded). New function RAND_add() is the
same as RAND_seed() but takes an estimate of the entropy as an additional
argument.

Primes p where (p-1)/2 is prime too are called "safe", not "strong".

Suggested by Bodo.

called with max > n when extend is set.

Remove references to 'TXT' in -inform and -outform switches.

Add short state string for MS SGC.

that can automatically determine the type of a DER encoded
"traditional" format private key and change some of the
d2i functions to use it instead of requiring the application
to work out the key type.

except when following the specs is bound to fail.

they can sometimes be different memory structures.

the middle of the OID table so the diff is rather large :-(