CA setting in each certificate on the chain is correct.  As a side-
effect always do the following basic checks on extensions, not just
when there's an associated purpose to the check:
- if there is an unhandled critical extension (unless the user has
  chosen to ignore this fault)
- if the path length has been exceeded (if one is set at all)
- that certain extensions fit the associated purpose (if one has been
  given)

apparently impossible to compose blended code with would perform
satisfactory on all x86 and x86_64 cores, an extra RC4_CHAR
code-path is introduced and P4 core is detected at run-time. This
way we keep original performance on non-P4 implementations and
turbo-charge P4 performance by factor of 2.8x (on 32-bit core).

be loaded instead of giving the misleading:

"unable to find 'distinguised_name' in config"

error message.

Add command line options -certform, -keyform and -pass to s_client and
s_server. This supports the use of alternative passphrase sources, key formats
and keys handled by an ENGINE.

Update docs.

Typo: use prompt_info, not cb_data->prompt_info.

Typo.

Typo.

Submitted by: David Holmes <davidh@3blackdogs.com>

serial number is supplied on command line.

libraries aren't built or used.  I can see the point, so I'm
reorganising a little for clarity.

PR:662

PR:917
Sumbmitted by: Michael Konietzka <konietzka@schlund.de>

results in even higher performance gain of 3.3x:-) At least on
Opteron...

therefore link with them).  Add LD_PRELOAD setting code where it was
still missing.

PR: 966

if $(EXHEADER) is empty.

Notified by many, solution suggested by Carson Gaspar <carson@taltos.org>

and friends may be entirely useless.  In such a case, LD_PRELOAD is
the answer, at least on platforms using LD_LIBRARY_PATH.  There might
be other variables to set on other platforms, please fill us in...

For now, we only do this with the tests, so they won't fail for silly
reasons like getting dynamically linked to older installed libraries
rather than the newly built ones...

PR: 960

PR: 963