Reviewed-by: NRichard Levitte <levitte@openssl.org>

    298 424 656 882 939 1630 1807 2263 2294 2311 2424 2623
    2637 2686 2697 2921 2922 2940 3055 3112 3156 3177 3277

Submitted by: Willy Weisz <weisz@vcpc.univie.ac.at>

Add options to output hash using older algorithm compatible with OpenSSL
versions before 1.0.0

Typo.

PR: 1466

the extension documentation.

subject hash, with -hash a synonym kept around for backward
compatibility reasons.
PR: 650

PR: 424

PR: 458

NAME OPTIONS are a subset of OPTIONS, so just make it =head2!
Submitted by:
Reviewed by:
PR: 333

section to SUBJECT AND ISSUER NAME OPTIONS
Submitted by:
Reviewed by:
PR: 333

Submitted by:
Reviewed by:
PR:

PR: 332

Submitted by: David Waitzman <djw@bbn.com>
Reviewed by: Lutz Jaenicke
PR: [openssl.org #38]

Add default values for display by the 'ca' utility
to openssl.cnf

Update docs.

Document the -certopt option to the x509 utility.

Add no_issuer option.

Fix X509_print_ex() so it prints out newlines when
certain fields are omitted.

American variants.

This allows intermediate CAs to be created more easily.

PKCS12_create() now checks private key matches certificate.

Fix typo in x509 app.

Update docs.

New function ASN1_STRING_to_UTF8() converts any ASN1_STRING
type to UTF8.

Document the new DN printing options.

Change a few names to be more meaningful.

Fix typos in CA.pl docs.

to support multiple calls.

New function to retrieve email address from certificates and
requests.

serial numbers.

could rename too :-(

Submitted by:
Reviewed by:
PR:

in the x509 utility.

yet.

Add a function X509_STORE_CTX_purpose_inherit() which implements the logic
of "inheriting" purpose and trust from a parent structure and using a default:
this will be used in the SSL code and possibly future S/MIME.

Partial documentation of the 'verify' utility. Still need to document how all
the extension checking works and the various error messages.