PR: 1693
Submitted by: Stefan Neis

PR: 1681

Ignore self issued certificates when checking path length constraints.

Duplicate OIDs in policy tree in case they are allocated.

Use anyPolicy from certificate cache and not current tree level.

Conversion between void * and function pointer.
Value computed not used.
Signed/unsigned argument.

version some time soon.

Submitted by: Huang Ying
Reviewed by: Douglas Stebila

than referencing existing X509_NAME_ENTRY structures so needs to be
completely freed.

Add appropriate #ifdefs round client cert functions in headers.

the rest of the certificate chain. Currently unused.

Submitted by: Ben Laurie <ben@links.org>

Submitted by: Ivan Nestlerode <inestlerode@us.ibm.com>
Reviewed by: steve

ptr members.

(So if the id_callback is bogus, we still have &errno.)

(Buggy line reported by Matthias Koenig.)