Typo.

PR: 1831
Submitted by: Damien Miller

Ignore self issued certificates when checking path length constraints.

Duplicate OIDs in policy tree in case they are allocated.

Use anyPolicy from certificate cache and not current tree level.

Submitted by: Daniel Black <daniel.subs@internode.on.net>

Add a -certsout option to output any certificates in a message.

Add test for example 4.11

Submitted by: Richard Hartmann <richih.mailinglist@gmail.com>

Use default algorithms for OCSP request and response signing. New command
line option to support other digest use for OCSP certificate IDs.

  I just compiled the 9.9-dev version from the 12022007 tarball under
  DJGPP. There were only 2 changes needed, one for b_sock.c, since
  DJGPP with WATT32 doesn't define socklen_t and one for testtsa to
  handle DOS style path separators. I also noted what seems to be a
  typographical error in ts.pod. The test suite passes. The patch is
  attached.

  Since I am in the US, I have sent notifications to the Bureau of
  Industry and Security and to the NSA.

PR: 1529

PR: 1575

PR: 1503
Submitted by: KISA
Reviewed by: Bodo Moeller

Submitted by Kees Cook <kees@outflux.net>

PR: 1461

PR: 1466

PR: 1443
Submitted by: Artem Chuprina <ran@cryptocom.ru>

the extension documentation.

PR: 1367