Submitted by: Peter 'Luna' Runestig" <peter+openssl-users@runestig.com>

with a failure.

Fix typos in some error codes.

Allow ADH to be used but not present in the default cipher
list.

Allow CERTIFICATE to be used in PEM headers for PKCS#7 structures:
some CAs do this.

the old functionality.

Various warning fixes.

Initial EVP symmetric cipher docs.

ssl3_get_message, which is more logical (and avoids a bug,
in addition to the one that I introduced yesterday :-)
and makes Microsoft "fast SGC" less special.
MS SGC should still work now without an extra state of its own
(it goes directly to SSL3_ST_SR_CLNT_HELLO_C, which is the usual state
for reading the body of a Client Hello message), however this should
be tested to make sure, and I don't have a MS SGC client.

designed for that.  This removes the potential error to mix data and
function pointers.

Please note that I'm a little unsure how incorrect calls to the old
ctrl functions should be handled, in som cases.  I currently return 0
and that's it, but it may be more correct to generate a genuine error
in those cases.

OpenSSL_add_all_algorithms(). Move these into
separate files so they work properly.

Add new -notext option to 'ca', -pubkey option to spkac.

Remove some "WTF??" casts from applications.

Fixes to keep VC++ happy and avoid warnings.

Docs tidy.

eliminate some of the -Wcast-qual warnings (debug-ben-strict target)

(including another problem in the s3_srvr.c state machine).

Tidy up CRYPTO_EX_DATA structures.

comment.

Add documentation for the ciphers command including a full
description of cipher lists.

minor changes.

Docs haven't been added at this stage. They are probably
best included in the 'ciphers' program docs.

just return -1 as in other error cases.

non-function pointers to function pointers and vice versa.
The current solution is to have unions that describe the
conversion we want to do, and gives us the ability to extract
the type of data we want.

The current solution is a quick fix, and can probably be made
in a more general or elegant way.

NO_SSL2 is defined, not SSL_R_UNKNOWN_PROTOCOL.

as a shared library without RSA.  Use #ifndef NO_SSL2 instead of
NO_RSA in ssl/s2*.c.

Submitted by: Kris Kennaway <kris@hub.freebsd.org>
Modified by Ulf Möller