Reviewed by: steve@openssl.org

Check return codes properly in md BIO and dgst command.

on failure. Keep output format consistent with previous versions.

Also flush stdout after printing ACCEPT in s_server.

terms of new API.

Submitted by: Tracy Camp <tracyx.e.camp@intel.com>

defering freeing in OBJ_cleanup().

Use BUF_strlcat() instead of strcat().
Use BIO_snprintf() instead of sprintf().
In some cases, keep better track of buffer lengths.
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>

PR: 287

exit() in whatever way works for the intended platform, and define
OPENSSL_EXIT() to have the old meaning (the name is of course because
it's only used in the openssl program)

I've covered all the memset()s I felt safe modifying, but may have missed some.

functionality in the programs that had that before.
Part fo PR 164

Submitted by Compaq.

CONF_modules_unload() now calls CONF_modules_finish()
automatically.

Default use of section openssl_conf moved to
CONF_modules_load()

Load config file in several openssl utilities.

Most utilities now load modules from the config file,
though in a few (such as version) this isn't done
because it couldn't be used for anything.

In the case of ca and req the config file used is
the same as the utility itself: that is the -config
command line option can be used to specify an
alternative file.

to go the monolith way (does anyone do that these days?).

NOTE: a few applications are missing in this commit.  I've a few more
changes in them that I haven't tested yet.

everywhere.

string (some engines may have certificates protected by a PIN!) and
a description to put into error messages.

Also, have our own password callback that we can send both a password
and some prompt info to.  The default password callback in EVP assumes
that the passed parameter is a password, which isn't always the right
thing, and the ENGINE code (at least the nCipher one) makes other
assumptions...

Also, in spite of having the functions to load keys, some utilities
did the loading all by themselves...  That's changed too.

missed any.

This compiles and runs on Linux, and external applications have no
problems with it.  The definite test will be to build this on VMS.

Make flag variables int instead of char.  This avoids getting into trouble on systems where char is unsigned by default

applications.

At the same time, add VMS support for Rijndael.