in a denial of service.  (CVE-2006-2937)  [Steve Henson]

PR:1348

PR: 1383

loaded. Add new function X509_CRL_get0_by_serial() to lookup a revoked
entry to avoid the need to access the structure directly.

Add new X509_CRL_METHOD to allow common CRL operations (verify, lookup) to be
redirected.

[Problem pointed out by Adam Young <adamy (at) acm.org>]

handling to support this.

callbacks.

based on subject name.

New thread safe functions to retrieve matching STACK from X509_STORE.

Cache some IDP components.

(m_len currently is 'unsigned int', not 'size_t')

Submitted by: Gisle Vanem

Colin Percival (this would have caused more problems than solved,
and isn't really necessary anyway)

(CVE-2006-4339)

Submitted by: Ben Laurie, Google Security Team
Reviewed by: bmoeller, mjc, shenson

PR: 1380

pedantic mode.

Fix warnings.

Submitted by: Corinna Vinschen

check for SSE bit instead of MMX, as pshufw was introduces in PIII, minor
optimization, typos...

256 byte S-box. AES_cbc_encrypt needs further work as it should also use
slow routines when processing smaller amount of data.

verify logic to try to use an unexpired CRL if possible.