listed on the web site for easy finding and downloading

check_ca(), to resolve constness issue.  check_ca() is called from the
purpose checkers instead of X509_check_ca(), since the stuff done by
the latter (except for calling check_ca()) is also done by
X509_check_purpose().

CA setting in each certificate on the chain is correct.  As a side-
effect always do the following basic checks on extensions, not just
when there's an associated purpose to the check:
- if there is an unhandled critical extension (unless the user has
  chosen to ignore this fault)
- if the path length has been exceeded (if one is set at all)
- that certain extensions fit the associated purpose (if one has been
  given)

apparently impossible to compose blended code with would perform
satisfactory on all x86 and x86_64 cores, an extra RC4_CHAR
code-path is introduced and P4 core is detected at run-time. This
way we keep original performance on non-P4 implementations and
turbo-charge P4 performance by factor of 2.8x (on 32-bit core).

be loaded instead of giving the misleading:

"unable to find 'distinguised_name' in config"

error message.

Add command line options -certform, -keyform and -pass to s_client and
s_server. This supports the use of alternative passphrase sources, key formats
and keys handled by an ENGINE.

Update docs.

Typo: use prompt_info, not cb_data->prompt_info.

Typo.

Typo.

Submitted by: David Holmes <davidh@3blackdogs.com>

serial number is supplied on command line.

libraries aren't built or used.  I can see the point, so I'm
reorganising a little for clarity.

PR:662

PR:917
Sumbmitted by: Michael Konietzka <konietzka@schlund.de>

results in even higher performance gain of 3.3x:-) At least on
Opteron...

therefore link with them).  Add LD_PRELOAD setting code where it was
still missing.

PR: 966