avoid inlines...)

Duplicate const.
Use of ; outside function.

condition check.

reimplement BN_nist_mod_521.

and should avoid any OS date limitations such as the year 2038 bug.

Submitted by: Amadeu A. Barbosa Jr <amadeu@tecgraf.puc-rio.br>

Also, fix CHANGES (consistency with stable branch).

PR: 1648

Also, "CHANGES" clean-ups.

a delta CRL in addition to a full CRL. Check and search delta in addition to
the base.

Tidy CRL scoring system.

Add new CRL path validation error.

and don't unnecessarily fail on input size 0.

and CRL signing keys.

CRL issuer is not part of the main path.

Not complete yet and not compiled in because the CRL issuer certificate is
not validated.

Delete X509_POLICY_REF code.

Fix handling of invalid policy extensions to return the correct error.

Add command line option to inhibit policy mappings.

TODO: robustness checking on name forms.

deprecate the original (numeric-only) scheme, and replace with the
CRYPTO_THREADID object. This hides the platform-specifics and should reduce
the possibility for programming errors (where failing to explicitly check
both thread ID forms could create subtle, platform-specific bugs).

Thanks to Bodo, for invaluable review and feedback.

8KB block, +60% on 1KB, +160% on 256B...