to subjectAltName when signing a certificate.

extension instead of just copying it.  That makes a certificate comply
even more with PKIX recommendations according to RFC 2459.

verified by looking at 'diff -u ../openssl-0.9.6a/CHANGES CHANGES')

0.9.5 is obsolete, so we don't have to discuss its 'openssl rsa'
seeding bug.

are however still common and are solved by checking config.log.

Ultra-Sparcs (both 32-bit and 64-bit compilations)

also 'test' appears to be available as '[' only in 'if' conditions.

Protect against future mistakes with an assert().

Spotted by Harald Koch <chk@pobox.com>

(we don't have an ASN1_TEMPLATE to complain about at this stage,
so  errtt == NULL  should be OK)

(provided by Stephen)

just a slowdown.

performance to gain.

compiler bug reported in <01032110293775.22278@weba3.iname.net>
(the '++seq[i]' condition is evaluated as 256 rather than 0
when the previous value is 255).

without releasing a lock. This is the same fix as applied to
OpenSSL-engine-0_9_6-stable, minus the ENGINE_ctrl() change - the HEAD
already had that fixed.

lock - stupidly, my last change addressed only one of them.