Just a sample, real world applications would have to be cleverer.

from X509_STORE_CTX.

structures using HTTP. Add wrapper function to handle CRL download.

traditional format uses MD5 which is prohibited in FIPS mode.

the SSL_CONF APIs.

This is complicated a little because the SSL_CTX structure is not available
when the command line is processed: so just check syntax of commands initially
and store them, ready to apply later.

(backport from HEAD)

definitions from e_os.h

Give more meaningful error is attempt made to use incorrect curve.

(from HEAD)

(backport from HEAD)