This is part of a large change submitted by Markus Friedl <markus@openbsd.org>

Submitted by: Tim Rice <tim@multitalents.net>

PR: #735, #765

PR: 440

FreeBSD. Goal is to extend support even to SCO5, UnixWare/OpenUnix...

always give the expected result on some platforms.

I've covered all the memset()s I felt safe modifying, but may have missed some.

give it.
For 0.9.7 and up, that means util/domd needs to remove those double
dashes from the argument list when gcc is used to find the
dependencies.

PR: 216, point 1

handled properly.
Part of PR 75

Submitted by: Nils Larsch

Retain compatibility of EVP_DigestInit() and EVP_DigestFinal()
with existing code.

Modify library to use digest *_ex() functions.

Submitted by: Toomas Kiisk <vix@cyber.ee>

Change all calls to low level digest routines in the library and
applications to use EVP. Add missing calls to HMAC_cleanup() and
don't assume HMAC_CTX can be copied using memcpy().

Note: this is almost identical to the patch submitted to openssl-dev
by Verdon Walker <VWalker@novell.com> except some redundant
EVP_add_digest_()/EVP_cleanup() calls were removed and some changes
made to avoid compiler warnings.

errors can be tolerated, hide the error from 'make'.
This gives shorter output both if ranlib fails and if
it works.

Make EVP_Digest*() routines return a value.

TODO: update docs, and make soe other routines
which use EVP_Digest*() check return codes.

sure they are available in opensslconf.h, by giving them names starting
with "OPENSSL_" to avoid conflicts with other packages and by making
sure e_os2.h will cover all platform-specific cases together with
opensslconf.h.

I've checked fairly well that nothing breaks with this (apart from
external software that will adapt if they have used something like
NO_KRB5), but I can't guarantee it completely, so a review of this
change would be a good thing.

acceptable, since all that happens if it fails is a library with
an index, which makes linking slower, but still working correctly.

This was meant for building individual ciphers separately;
but nothing of this is maintained, it does not work
because we rely on central configuration by the Configure
utility with <openssl/opensslconf.h> etc., so the files
are only wasting space and time.

choice of parameters) when they are needed.

proposed by Holger Reif

eliminate some of the -Wcast-qual warnings (debug-ben-strict target)

went down from 1050 to 921 cycles on Pentium II. I haven't checked the
figures on Pentium yet.

now and I'm putting it back to 'make test' later today.