(CVE-2006-4339)

Submitted by: Ben Laurie, Google Security Team
Reviewed by: bmoeller, mjc, shenson

verify logic to try to use an unexpired CRL if possible.

them.

Send ctrls to EVP_PKEY_METHOD during signing of PKCS7 structure so
customisation is possible.

large FD: it's non-blocking mode anyway

CRYPTO_get_idptr_callback(), CRYPTO_thread_idptr() for a 'void *' type
thread ID, since the 'unsigned long' type of the existing thread ID
does not always work well.

Put ECCdraft ciphersuites back into default build (but disabled
unless specifically requested)

the BN library more generally useful.

Submitted by: Douglas Stebila

Submitted by: Masashi Fujita
Reviewed by: Bodo Moeller

coding it to "sha1".

implementations and functional reference counting when a context
is allocated, free or copied.

existing structure and using alternative digest for signing.

Use cross reference table in ASN1_item_sign(), ASN1_item_verify() to eliminate
the need for algorithm specific code.

Fix some typos in GOST OIDs.

Update dependencies.