patch.

Submitted by: Franz Sirl <Franz.Sirl-kernel@lauterbach.com>

"make update".

trouble if header files are included in some "impropper" order.
It's much better if the application programmer has to specify on his
or her own if _REENTRANT shall be defined and when.

ssl3_get_message, which is more logical (and avoids a bug,
in addition to the one that I introduced yesterday :-)
and makes Microsoft "fast SGC" less special.
MS SGC should still work now without an extra state of its own
(it goes directly to SSL3_ST_SR_CLNT_HELLO_C, which is the usual state
for reading the body of a Client Hello message), however this should
be tested to make sure, and I don't have a MS SGC client.

symbols.

defines when compiling applications, and allow applications to
select what #defines to enable -- OPENSSL_EXLUCDE_DEFINES
enables the "#define NO_whatever" stuff only, which avoids
potential severe confusion caused by "#define _REENTRANT" when
opensslconf.h is not the first header file #included.

with.

Currently, those defines are protected with a OPENSSL_EXCLUDED.  That
may not be the best strategy, but it will do for now.

qualifier in asm definitions as it prevents compiler from moving
the instruction(s) during optimization pass.

Avoid enabled 'assert()' in production library.

Submitted by: Martin Kraemer <martin.kraemer@mch.sni.de>

as a shared library without RSA.  Use #ifndef NO_SSL2 instead of
NO_RSA in ssl/s2*.c.

Submitted by: Kris Kennaway <kris@hub.freebsd.org>
Modified by Ulf Möller

set the #! line with the path to Perl.

Submitted by: Peter Jones

problem was that one of the replacement routines had not been working since
SSLeay releases.  For now the offending routine has been replaced with
non-optimised assembler.  Even so, this now gives around 95% performance
improvement for 1024 bit RSA signs.

Submitted by: Lennart Bång, Bodo Möller

platforms. See crypto/rc4/rc4_enc.c for further details.

Contributed by: Peter Huang <PETER_HUANG@HP-Cupertino-om8.om.hp.com>

because various programs are not updated that often
and hence still expect header files names without the openssl/ prefix.