temporary BIGNUMs. BN_CTX still uses a fixed number of BIGNUMs, but
the BN_CTX implementation could now easily be changed.

Add new -notext option to 'ca', -pubkey option to spkac.

Remove some "WTF??" casts from applications.

Fixes to keep VC++ happy and avoid warnings.

Docs tidy.

"Make DSA_generate_parameters faster").

(including another problem in the s3_srvr.c state machine).

New function BN_pseudo_rand().
Use BN_prime_checks_size(BN_num_bits(w)) rounds of Miller-Rabin when
generating DSA primes (why not use BN_is_prime()?)

Tidy up CRYPTO_EX_DATA structures.

certificate: currently this includes trust settings
and a "friendly name".

Submitted by: Lennart Bång, Bodo Möller

tolerated in certificates.

DSA_METHOD to make it more consistent with RSA_METHOD.

while implementing and using it.

it is not needed.

"Chad C. Mulligan" <mulligan@antipope.org>.

a pain to read when using 4-space tabs.

in cryptlib.h (which is often included as "../cryptlib.h"), then the
question remains relative to which directory this is to be interpreted.
gcc went one further directory up, as intended; but makedepend thinks
differently, and so probably do some C compilers.  So the ../ must go away;
thus e_os.h goes back into include/openssl (but I now use
#include "openssl/e_os.h" instead of <openssl/e_os.h> to make the point) --
and we have another huge bunch of dependency changes.  Argh.

There were problems with putting e_os.h just into the top directory,
because the test programs are compiled within test/ in the "standard"
case in in their original directories in the makefile.one case;
and in the latter symlinks may not be available.

include file.

Submitted by:
Reviewed by:
PR:

Submitted by: Anonymous

Submitted by:
Reviewed by:
PR:

Submitted by:
Reviewed by:
PR:

a -write option is needed to actually change anything. Second attempt at
getting rid of ERR, ERRC definitions: it might even work this time :-)

Submitted by:
Reviewed by:
PR:

Submitted by:
Reviewed by:
PR:

to error code script: it can now find untranslatable function codes (usually
because the function is static and not defined in a header: occasionally because
of a typo...) and unreferenced function and reason codes. To see this try:
perl util/mkerr.pl -recurse -debug
Also fixed some typos in crypto/pkcs12 that this found :-)
Also tidy up some error calls that had to be all on one line: the old error
script couldn't find codes unless the call was all on one line.