Gittens.

when OpenSSL_add_all_algorithms() is called.

CONF_modules_unload() now calls CONF_modules_finish()
automatically.

Default use of section openssl_conf moved to
CONF_modules_load()

Load config file in several openssl utilities.

Most utilities now load modules from the config file,
though in a few (such as version) this isn't done
because it couldn't be used for anything.

In the case of ca and req the config file used is
the same as the utility itself: that is the -config
command line option can be used to specify an
alternative file.

Submitted by: Nils Larsch <nla@trustcenter.de>

0.9.7 now lives in the branch OpenSSL_0_9_7-stable.

CygWin 1.3.x, which includes thread and shared library support.

Submitted by Corinna Vinschen <vinschen@redhat.com> and modified a
little bit.

0.9.7.

make it possible to produce shared libraries on ReliantUNIX.

OpenSSL.  Adding '_ossl' in the name seems to be a good way to do
this.

* make openssl rsa work with -engine chil
* misc changes, including debug-linux-ppro Configure target
  and FORMAT_NETSCAPE-aware load_{,pub}key()

This completes the application of his changes.

    ERR_peek_last_error
    ERR_peek_last_error_line
    ERR_peek_last_error_line_data
(supersedes ERR_peek_top_error).

Rename OPENSSL_NO_OLD_DES_SUPPORT into OPENSSL_DISABLE_OLD_DES_SUPPORT
because OPENSSL_NO_... indicates disabled algorithms (according to
mkdef.pl).

syntactically.

functions to _old_des_*.

default_algorithms option in ENGINE config.

Initial ENGINE config module, docs to follow.

Fix buffer overrun errors in OPENSSL_conf().

to indicate that a real handshake is taking place (the value will be
lost during multiple invocations). Set s->new_session to 2 instead.

the SSL_R_LENGTH_MISMATCH error is detected.

Experimental configuration code.

Incomplete, largely untested and subject to change/deletion.

to make it easier to fix things.

Submitted by: "Dan S. Camper" <dan@bti.net>

crypto/rijndael.  Additionally, I applied the AES integration patch
from Stephen Sprunk <stephen@sprunk.org> and fiddled it to work
properly with the normal EVP constructs (and incidently work the same
way as all other symmetric cipher implementations).

This results in an API that looks a lot like the rest of the OpenSSL
cipher suite.

Submitted by: D P Chang <dpc@qualys.com>
Reviewed by: Bodo

Don't overwrite signing time.