is needed to test some profiles/protocols which reject certificates
with unsupported versions.

Submitted by: jean-etienne.schwartz@bull.net

In OCSP_basic_varify return an error if X509_STORE_CTX_init fails.

structures using HTTP. Add wrapper function to handle CRL download.

from X509_STORE_CTX.

side, if possible.

Don't advertise compressed char2 for SuiteB as it is not supported.

Add support for separate verify and chain stores in s_client.

Make ASN1_UTCTIME_cmp_time_t more robust by using the new time functions.

PR: 2909

Update test cases to cover internal error return values.

Remove IDNA wildcard filter.

Submitted by: Dmitry Belyavsky <beldmit@gmail.com>

Fix DH double free if parameter generation fails.

Submitted by: Florian Weimer