to my previous brain-damaged version)

CURLOPT_TIMEOUT, the _longer_ time would wrongly be used for the SSL
connection time-out!

(when using OpenSSL).

text from OpenSSL.

callback" error message so I've now made the setting of that callback not be
as critical as before. The function is only used for additional loggging/
trace anyway so a failure just means slightly less data. It should still be
able to proceed and connect fine to the server.

SSL_CTX_new and others, and also makes functions SSLv23_client_method,
TLSv1_client_method, etc return a 'const' SSL_METHOD pointer. Previous
versions do not use the 'const' qualifier.

'assignment discards qualifiers from pointer target type' warning.

too big

internally, with code provided by sslgen.c. All SSL-layer-specific code is
then written in ssluse.c (for OpenSSL) and gtls.c (for GnuTLS).

As far as possible, internals should not need to know what SSL layer that is
in use. Building with GnuTLS currently makes two test cases fail.

TODO.gnutls contains a few known outstanding issues for the GnuTLS support.

GnuTLS support is enabled with configure --with-gnutls

used, it slows initialization too much reading an infinitely long file!

remote certificate name when it didn't match the used host name.

a precedence problem with the zlib header. See CHANGES for details.

ssluse.*: Added SSL_strerror(). Curl_SSL_engines_list() now returns a slist
which must be freed by caller.

UrlState sub-struct. Also made the engine_list exist for non-ssl builds to
make curl build.

Added Curl_SSL_engines_list(), cleanup SSL in url.c
(no HAVE_OPENSSL_x etc.).

already UTF-8 encoded. We check for this case and copy the raw string manually
to avoid the problem. This code can be made conditional in the future when
OpenSSL has been fixed. Work-around brought by Alexis S. L. Carvalho.

and not an int.

use when built with a very old OpenSSL version.

generic connect uses

precaution to prevent mistakes to lead to buffer overflows.