loaded. Add new function X509_CRL_get0_by_serial() to lookup a revoked
entry to avoid the need to access the structure directly.

Add new X509_CRL_METHOD to allow common CRL operations (verify, lookup) to be
redirected.

handling to support this.

callbacks.

based on subject name.

New thread safe functions to retrieve matching STACK from X509_STORE.

Cache some IDP components.

verify logic to try to use an unexpired CRL if possible.

them.

handle unsupported key types.

key ASN1 handling through a single EVP_PKEY_ASN1_METHOD structure and move
the spaghetti algorithm specific code to a single ASN1 module for each
algorithm.

and response verification.

Submitted by: Zoltan Glozik <zglozik@opentsa.org>
Reviewed by: Ulf Moeller

Submitted by: David Hartman <david_hartman@symantec.com>

from .h files...

PR: 1170
Submitted by: Yair Elharrar
Reviewed and edited by: Nils Larsch

    	./configure no-deprecated [no-dsa] [no-dh] [no-ec] [no-rsa]
    	make depend all test
work again

PR: 1159

PR: 1131

directory instead of the other way around.

PR: 1131

PR: 1097

expiry.

[most importantly] put back dependencies accidentaly eliminated in
check-in #13342.

attribute in EVP_PKEY structure.

(Also improve util/ck_errf.pl script, and occasionally
fix source code formatting.)

Remove more bogus shadow warnings.

Fix Win32 build system to use 'Makefile' instead of 'Makefile.ssl'.

a security threat on unexpecting applications.  Document and test.