Submitted by: Dmitry Belyavsky, Seguei Leontiev
PR: 2821

Just a sample, real world applications would have to be cleverer.

from X509_STORE_CTX.

structures using HTTP. Add wrapper function to handle CRL download.

traditional format uses MD5 which is prohibited in FIPS mode.

the SSL_CONF APIs.

This is complicated a little because the SSL_CTX structure is not available
when the command line is processed: so just check syntax of commands initially
and store them, ready to apply later.

(backport from HEAD)