scripts running the test OCSP responder.

new ctrl to retrive value of received temporary key in server key exchange message, print out details in s_client

insignificant, it's actually 4 cycles less for 14 instructions sequence!

assembler.

Multiple copies of the ENGINE will cause problems when it is cleaned up as
the methods are stored in static structures which will be overwritten and
freed up more than once.

Set static methods to NULL when the ENGINE is freed so it can be reloaded.

perform sanity checks on server certificate type as soon as it is received instead of waiting until server key exchange

some invalid operations for testing purposes. Currently this can be used
to sign using digests the peer doesn't support, EC curves the peer
doesn't support and use certificates which don't match the type associated
with a ciphersuite.

all derived keys to the message callback.

Add code to SSL_trace to include support for printing out keys.

Reported by: Tomas Mraz <tmraz@redhat.com>

Treat a NULL value passed to drbg_free_entropy callback as non-op. This
can happen if the call to fips_get_entropy fails.

contemporary SDK.

PR: 2858

PR: 2838

PR: 2859
Submitted by: John Foley

perlasm/x86_64-xlate.pl instead.

New function X509_chain_up_ref to dup and up the reference count of
a STACK_OF(X509): replace equivalent functionality in several places
by the equivalent call.

by a certificate chain. Add additional tests to handle client
certificates: checks for matching certificate type and issuer name
comparison.

Print out results of checks for each candidate chain tested in
s_server/s_client.