check_ca(), to resolve constness issue.  check_ca() is called from the
purpose checkers instead of X509_check_ca(), since the stuff done by
the latter (except for calling check_ca()) is also done by
X509_check_purpose().

CA setting in each certificate on the chain is correct.  As a side-
effect always do the following basic checks on extensions, not just
when there's an associated purpose to the check:
- if there is an unhandled critical extension (unless the user has
  chosen to ignore this fault)
- if the path length has been exceeded (if one is set at all)
- that certain extensions fit the associated purpose (if one has been
  given)

leak on VMS.

'OpenSSL_0_9_7-stable'.

apparently impossible to compose blended code with would perform
satisfactory on all x86 and x86_64 cores, an extra RC4_CHAR
code-path is introduced and P4 core is detected at run-time. This
way we keep original performance on non-P4 implementations and
turbo-charge P4 performance by factor of 2.8x (on 32-bit core).

be loaded instead of giving the misleading:

"unable to find 'distinguised_name' in config"

error message.

be loaded instead of giving the misleading:

"unable to find 'distinguised_name' in config"

error message.

Add command line options -certform, -keyform and -pass to s_client and
s_server. This supports the use of alternative passphrase sources, key formats
and keys handled by an ENGINE.

Update docs.

Typo: use prompt_info, not cb_data->prompt_info.

Typo: use prompt_info, not cb_data->prompt_info.

Typo.

Typo.

Typo.

Typo.

Use OPENSSL_NO_CAST, not OPENSSL_NO_CAST5 in e_old.c

Submitted by: David Holmes <davidh@3blackdogs.com>

Submitted by: David Holmes <davidh@3blackdogs.com>

serial number is supplied on command line.

serial number is supplied on command line.