Submitted by "Bryan W. Headley" <bheadley@interaccess.com>

Submitted by: D P Chang <dpc@qualys.com>
Reviewed by: Bodo

-certfile is given as well.

<sram@broadcom.com> with the following comment:

[...] We have implemented failover (ie, if for some reason that the
hardware fails, the implementation detects this failure and performs
this operation as if no hardware is present, ie, in software) for
sometime now and have tested it here with our hardware. [...]

This change was cc:ed to exports@crypto.com

Don't overwrite signing time.

("Anton J. Gamel" <gamel@anna.anatomie.uni-freiburg.de>)

RFCs concerning X.500 directories use UID as a shorter name for the
attribute type userId, which is defined by CCITT and available through
RFCs 1274 and 2247.

Unfortunately, if some applications have used the name "UID" for the
uniqueIdentifier attribute type, they will produce incorrect results.
However, I found it better to follow the standards that are out there
rather than having our own incompatible one.

main documentation, so let's warn them a little more, so the word
"OBSOLETE" really gets understood.

Fix (?): Delete 'ip-pda 6' (id-pda-pseudonym) because it does not exist
in RFC 3039.

Also change Perl scripts to put auto-generation warning in the
first lines of the file.

build.

calls.  This patch allows compilation either way.

Submitted by: Jeffrey Altman <jaltman@columbia.edu>

(in main branch, hn_ncipher.c is already correct)

disabled

Submitted by: Richard Shapiro <rshapiro@abinitio.com>