Submitted by: Nils Larsch

PR: 578

Memory leak fix: RSA_blinding_on() would leave a dangling pointer in
                 rsa->blinding under certain circumstances.
Double definition fix: RSA_FLAG_NO_BLINDING was defined twice.

it's time for a release, so I'm just adding an enty in PROBLEMS, and will
hopefully solve this for a later release

It seems that svr3 and svr5 differ, after all.

libraries.  What's worse, the directories given in LD_LIBRARY_PATH are
checked first!  Therefore, we need a hack to prepend all the
directories we give with -L to the current value of LD_LIBRARY_PATH,
thereby temporarly forming a hacked value.

Only copy LIBEXTRAS if they are given.

Svr5 doesn't use -z allextract...

the cipher name in the list is not guaranteed to be at least "buflen"
long.
PR: 567
Submitted by: "Matt Harren" <matth@cs.berkeley.edu>

form of unneeded direct calls through the engine pointer..

of unneeded includes of openssl/engine.h.

pointers should be used.  It doesn't necessarely mean it should go through
the ENGINE framework.

EVP_PKEY_cmp_parameters() returned 0, otherwise it should
go on processing the public key component.  Thia has nothing
to do with the proper handling of EC parameters or not.

Have EVP_PKEY_cmp() call EVP_PKEY_cmp_parameters(), and make a note
about the lack of parameter comparison for EC.

PR: 564

rotate_serial() that works like rotate_index().

we only check to the opening parenthesis anyway...

we're using the printing functions correctly or not.

I used the corresponding attributes found in the header files of my
Linux installation.

CA.sh.

the CA certificate part of the CA database, and combined with
'unique_subject=no', it should make operations like CA certificate
roll-over easier.