PR: 1131

directory instead of the other way around.

PR: 1131

PR: 1097

expiry.

[most importantly] put back dependencies accidentaly eliminated in
check-in #13342.

attribute in EVP_PKEY structure.

(Also improve util/ck_errf.pl script, and occasionally
fix source code formatting.)

Remove more bogus shadow warnings.

Fix Win32 build system to use 'Makefile' instead of 'Makefile.ssl'.

a security threat on unexpecting applications.  Document and test.

 - Enforce that there should be no policy settings when the language
   is one of id-ppl-independent or id-ppl-inheritAll.
 - Add functionality to ssltest.c so that it can process proxy rights
   and check that they are set correctly.  Rights consist of ASCII
   letters, and the condition is a boolean expression that includes
   letters, parenthesis, &, | and ^.
 - Change the proxy certificate configurations so they get proxy
   rights that are understood by ssltest.c.
 - Add a script that tests proxy certificates with SSL operations.

Other changes:

 - Change the copyright end year in mkerr.pl.
 - make update.

are performed.

failure and freeing up memory if a failure occurs.

PR:620

CA setting in each certificate on the chain is correct.  As a side-
effect always do the following basic checks on extensions, not just
when there's an associated purpose to the check:
- if there is an unhandled critical extension (unless the user has
  chosen to ignore this fault)
- if the path length has been exceeded (if one is set at all)
- that certain extensions fit the associated purpose (if one has been
  given)

if $(EXHEADER) is empty.

Notified by many, solution suggested by Carson Gaspar <carson@taltos.org>

for the PKCS#9 OID then the non standard MS OID.

This tidies up verify parameters and adds support for integrated policy
checking.

Add support for policy related command line options. Currently only in smime
application.

WARNING: experimental code subject to change.

when trying to build a shared library on VMS or Windows...

the Makefiles. NB: this commit is probably going to generate a huge posting
and it is highly uninteresting to read.

tree. This further reduces header interdependencies, and makes some
associated cleanups.

verified structure can contain its own CRLs (such as PKCS#7 signedData).

Tidy up some of the verify code.