Ignore self issued certificates when checking path length constraints.

Duplicate OIDs in policy tree in case they are allocated.

Use anyPolicy from certificate cache and not current tree level.

then the backslashes need escaping to avoid being treated as switches in
the auto-generated strings in opensslconf.h. Perl users are welcome to
suggest a less hokey way of doing this ...

Conversion between void * and function pointer.
Value computed not used.
Signed/unsigned argument.

version some time soon.

Submitted by: Huang Ying
Reviewed by: Douglas Stebila

than referencing existing X509_NAME_ENTRY structures so needs to be
completely freed.

CryptUIDlgSelectCertificateFromStore() at runtime. Add callback function
for selection mechanism.