makes certificates genereated by ca, CA.pl etc useless for anything else.

PR:1374

OpenVMS, and possibly more.

Ref: http://h71000.www7.hp.com/doc/82final/6529/6529pro_019.html#r_select

verify logic to try to use an unexpired CRL if possible.

For S/MIME multipart/signed type the signature is calculated on the fly.

For other detached data forms the stream isn't used after the single pass to
calculate signatures.

For non-detached the data is stored in a memory BIO.

keygen API: make sure that 'pkey_type' is actually visible to MAIN().

Submitted by: Masashi Fujita
Reviewed by: Bodo Moeller

any of them on the linker command line.  Besides, OBJECT_FILE now
represents the last compiled file, and using it here only results in
getting warnings about multiple definitions of the symbols in that
file.

it work better.

existing structure and using alternative digest for signing.

been processed. This allows any ENGINE changing operations to be processed
first (for example a config file).