Submitted by Frederic.Giudicelli@INTRINsec.com

Reject certificates with unhandled critical extensions.

to digests to retain compatibility.

Retain compatibility of EVP_DigestInit() and EVP_DigestFinal()
with existing code.

Modify library to use digest *_ex() functions.

Submitted by: Toomas Kiisk <vix@cyber.ee>

such cases, a flush should *not* attempt to finalise the encoding, as
the EVP_ENCODE_CTX structure will only be filled with garbage.  For
the same reason, do the same check when a wpending is performed.

depend on the environment, like the presence of the OpenBSD crypto
device or of Kerberos, do not change the dependencies within OpenSSL.

however for different reasons. This separation should prevent the win32
build from interpreting evptests.txt as source code.

name. The implementations already use this anyway.

not implemented. (Bug reported by Martin Szotkowski)

This also changes the non-"_ex" versions to defer directly to
EVP_CipherInit_ex() rather than EVP_CipherInit() to avoid an unecessary
level of indirection.

it to be defined on all platforms whether or not it is of any practical
use on them. This also resolves linker problems on "special" platforms,
such as win32.

Martin Szotkowski.

VMS as well :-).

types.h to ossl_typ.h.
Also, it seems like krb5 was forgotten in some places.

types.h to ossl_typ.h.

BIO buffer instead of hard coding it as 8.

*sigh* habit...

Let's use sk_ENGINE_CLEANUP_ITEM_pop_free() instead.

a pointer any more).

the compiler not to warn about that.

needed.

of the stack, and the (void *) type used in the underlying sk_***
functions.  However, declaring a STACK_OF(type) where type is a *function*
type implicitly involves casts between function pointers and data pointers.
That's a no-no. This changes the ENGINE_CLEANUP handling to use a regular
data type in the stack.

currently line 470).