Check return value if d2i_PBEPARAM().

Remove useless num = 0 assignment.

Remove redundant cases on sock_ctrl(): default case handles them.

Submitted by: David Woodhouse <dwmw2@infradead.org>

Pass passphrase minimum length down to UI.

Submitted by: Torsten Hilbrich <torsten.hilbrich@secunet.com>

Fix memory leak when engine name cannot be loaded.

Also, add missing CHANGES entry for CVE-2009-3245 (code changes submitted to this branch on 23 Feb 2010),
and further harmonize this version of CHANGES with the versions in the current branches.

Clear error queue in a few places in SSL code where errors are expected
so they don't stay in the queue.

ghash-x86_64.pl: minimize stack frame usage.
ghash-x86.pl: modulo-scheduling MMX loop in respect to input vector
results in up to 10% performance improvement.

Submitted By: Jaroslav Imrich <jaroslav.imrich@disig.sk>

The prompt_info and wrong_info parameters can be empty strings which
can produce confusing prompts. Treat empty string same as NULL.

security relevent we'd better list it.

Reject PSS signatures with unsupported trailer value.

from a digest algorithm.