Submitted by: Pierre Delaage

Just a sample, real world applications would have to be cleverer.

certificate. Add options to s_client, s_server and x509 utilities
to print results of checks.

OPENSSL_NO_SSL_INTERN all ssl related structures are opaque
and internals cannot be directly accessed. Many applications
will need some modification to support this and most likely some
additional functions added to OpenSSL.

The advantage of this option is that any application supporting
it will still be binary compatible if SSL structures change.

load_crls and tidy up load_certs. Remove useless purpose variable from
verify utility: now done with args_verify.

Submitted by: steve@openssl.org

Add support for custom headers in OCSP requests.

deprecate the original (numeric-only) scheme, and replace with the
CRYPTO_THREADID object. This hides the platform-specifics and should reduce
the possibility for programming errors (where failing to explicitly check
both thread ID forms could create subtle, platform-specific bugs).

Thanks to Bodo, for invaluable review and feedback.

version some time soon.

to 'unsigned long' (ie. odd platforms/compilers), so a pointer-typed
version was added but it required portable code to check *both* modes to
determine equality. This commit maintains the availability of both thread
ID types, but deprecates the type-specific accessor APIs that invoke the
callbacks - instead a single type-independent API is used.  This simplifies
software that calls into this interface, and should also make it less
error-prone - as forgetting to call and compare *both* thread ID accessors
could have led to hard-to-debug/infrequent bugs (that might only affect
certain platforms or thread implementations). As the CHANGES note says,
there were corresponding deprecations and replacements in the
thread-related functions for BN_BLINDING and ERR too.

Initial support for CMS.

Add zlib compression BIO.

Add AES key wrap implementation.

Generalize S/MIME MIME code to support CMS and/or PKCS7.

terms of new API.

supports it (yet).

defering freeing in OBJ_cleanup().

temporarily[!] removes support for couple of esoteric platforms [well,
Netware, vxWorks and VMS].

all Windows targets.

handles properly by bss_file.c, which renders _fmode redundant.

Fix Win32 build system to use 'Makefile' instead of 'Makefile.ssl'.