- safestack macro changes for C++ were incomplete
- RLE decompression boundary case
- SSL 2.0 key arg length check

Submitted by: Google (Adam Langley, Neel Mehta, Bodo Moeller)

a context.

can be very slow on embedded platforms. Hard code DSA parameters instead.

we shouldn't reject digest lengths larger than SHA256: the FIPS
algorithm tests include SHA384 and SHA512 tests.

Not properly integrated or tested yet.

Make shared library default for fips.

crypto.h if needed.

Modify source tree to handle change.

OpenSSL malloc dependencies.

definition. Remove stale function references from fips.h

to EVP any more.

Move locking #define into fips.h.

Set FIPS locking callbacks at same time as OpenSSL locking callbacks.

on OpenSSL locking code. Use API in some internal FIPS files.

Remove redundant ENGINE defines from fips.h

redirect locking to minimal FIPS_lock() function where required.