-certfile is given as well.

<sram@broadcom.com> with the following comment:

[...] We have implemented failover (ie, if for some reason that the
hardware fails, the implementation detects this failure and performs
this operation as if no hardware is present, ie, in software) for
sometime now and have tested it here with our hardware. [...]

This change was cc:ed to exports@crypto.com

Don't overwrite signing time.

("Anton J. Gamel" <gamel@anna.anatomie.uni-freiburg.de>)

RFCs concerning X.500 directories use UID as a shorter name for the
attribute type userId, which is defined by CCITT and available through
RFCs 1274 and 2247.

Unfortunately, if some applications have used the name "UID" for the
uniqueIdentifier attribute type, they will produce incorrect results.
However, I found it better to follow the standards that are out there
rather than having our own incompatible one.

main documentation, so let's warn them a little more, so the word
"OBSOLETE" really gets understood.

Fix (?): Delete 'ip-pda 6' (id-pda-pseudonym) because it does not exist
in RFC 3039.

Also change Perl scripts to put auto-generation warning in the
first lines of the file.

build.

calls.  This patch allows compilation either way.

Submitted by: Jeffrey Altman <jaltman@columbia.edu>

(in main branch, hn_ncipher.c is already correct)

disabled

Submitted by: Richard Shapiro <rshapiro@abinitio.com>

released.

essentially overwrites itself with the new ENGINE, with the exception of
reference counts, ex_data structures, and other 'admin' elements. However
if the new ENGINE doesn't populate certain elements, there's the risk of
the "dynamic" ENGINE's elements showing through - the "cmd_defns" were just
one of the possibilities. This implements a more comprehensive cleanup.

device. This change enables it for building as a self-contained "dynamic"
ENGINE, to help testing such mechanisms.

object - otherwise we overwrite any flags that had been previously set in
the DSO before calling DSO_load().