enhance EC method to support setting curve type when generating keys and add parameter encoding option

between NIDs and the more common NIST names such as "P-256". Enhance
ecparam utility and ECC method to recognise the NIST names for curves.

PR: 2677
Submitted by: Annue Yousar

Submitted by: Mounir IDRASSI <mounir.idrassi@idrix.net>
Approved by: steve@openssl.org

Check return value of ECDSA_sign() properly.

Initial support for CMS.

Add zlib compression BIO.

Add AES key wrap implementation.

Generalize S/MIME MIME code to support CMS and/or PKCS7.

Send ctrls to EVP_PKEY_METHOD during signing of PKCS7 structure so
customisation is possible.

functions and EVP_MD_CTX_copy work properly.

value of the passed output buffer is NULL.

The old method of using EVP_PKEY_size(pkey) isn't flexible enough to cover all
cases where the output length may depend on the operation or the parameters
associated with it.

Fix rsa_pkey_method.

Add digest size sanity checks.

need for a separate EVP_PKEY parameter in the other operation
initialization routines.

No method implementations yet.

of the EVP routines to public key algorithms.

I'll remember to try to compile this with warnings enabled next time :-)

This is currently *very* experimental and needs to be more fully integrated
with the main verification code.

Merge from the ASN1 branch of new ASN1 code
to main trunk.

Lets see if the makes it to openssl-cvs :-)

Update PKCS12_parse().

Make the keyid in certificate aux info more usable.

represent everything by OIDs.

trust settings of the root CA.

After a few fixes it seems to work OK.

Still need to add support to SSL and S/MIME code though.

in a table. Doesn't do too much yet.

Make the -<digestname> options in 'x509' affect all relevant
options.

Change the name of the 'notrust' options to 'reject' as this
causes less confusion and is a better description of the
effect.

A few constification changes.

Extend the X509_PURPOSE structure to include shortnames for purposed and default
trust ids.

Still need some extendable trust checking code and integration with the SSL and
S/MIME code.

certificate: currently this includes trust settings
and a "friendly name".

EVP_CipherInit() this because the IV wont be easily available when doing
PKCS#5 v2.0