"Make DSA_generate_parameters faster").

(including another problem in the s3_srvr.c state machine).

New -pkcs12 option to CA.pl.
Document CA.pl script.
Initialise and free up the extra DH fields
(nothing uses them yet though).

New function BN_pseudo_rand().
Use BN_prime_checks_size(BN_num_bits(w)) rounds of Miller-Rabin when
generating DSA primes (why not use BN_is_prime()?)

Clean up bn_mont.c.

Tidy up CRYPTO_EX_DATA structures.

Update docs.

Add new program dhparam and update docs.

Gets Lutz Jaenicke's name right this time :-)

Apologies to both concerned.

minor changes.

Docs haven't been added at this stage. They are probably
best included in the 'ciphers' program docs.

serial numbers.

as a shared library without RSA.  Use #ifndef NO_SSL2 instead of
NO_RSA in ssl/s2*.c.

Submitted by: Kris Kennaway <kris@hub.freebsd.org>
Modified by Ulf Möller

are not guaranteed to be unpredictable.

returns int (1 = ok, 0 = not seeded). New function RAND_add() is the
same as RAND_seed() but takes an estimate of the entropy as an additional
argument.

Primes p where (p-1)/2 is prime too are called "safe", not "strong".

Suggested by Bodo.

called with max > n when extend is set.

Remove references to 'TXT' in -inform and -outform switches.

Add short state string for MS SGC.

that can automatically determine the type of a DER encoded
"traditional" format private key and change some of the
d2i functions to use it instead of requiring the application
to work out the key type.