Submitted by: Goetz Babin-Ebell

PR: 1070

memory BIO (for example from SMIME_read_PKCS7 and detached data) avoid lots
of slow memory copies from the memory BIO by saving the content in a
temporary read only memory BIO.

verified structure can contain its own CRLs (such as PKCS#7 signedData).

Tidy up some of the verify code.

the buffer pointer.

Rename PKCS7_PARTSIGN to PKCS7_STREAM.

Guess what that's for :-)

See the commit log message for that for more information.

NB: X509_STORE_CTX's use of "ex_data" support was actually misimplemented
(initialisation by "memset" won't/can't/doesn't work). This fixes that but
requires that X509_STORE_CTX_init() be able to handle errors - so its
prototype has been changed to return 'int' rather than 'void'. All uses of
that function throughout the source code have been tracked down and
adjusted.

Change the EVP_somecipher() and EVP_somedigest()
functions to return constant EVP_MD and EVP_CIPHER
pointers.

Update docs.

key algorithms and leaking if the signature verify
fails.

sure they are available in opensslconf.h, by giving them names starting
with "OPENSSL_" to avoid conflicts with other packages and by making
sure e_os2.h will cover all platform-specific cases together with
opensslconf.h.

I've checked fairly well that nothing breaks with this (apart from
external software that will adapt if they have used something like
NO_KRB5), but I can't guarantee it completely, so a review of this
change would be a good thing.

of complaints from the compiler about data pointers and function
pointers not being compatible with each other.

Fix doc example, and fix BIO_find_type().

Fix PKCS7_verify(). It was using 'i' for both the
loop variable and the verify return value.

Add new option to PKCS7_sign to exclude S/MIME capabilities.

because it added them manually and as part of SMIME_crlf_copy().
Removed the manual add.

again.

encrypted mail. Also update the smime docs.

Fix the usage message of smime utility and sanitise the return
codes.

Add some documentation.

to a file if we are verifying.