add various X509V3_CTX helper functions and support for LHASH as the config
database.

Submitted by: Richard Levitte <levitte@stacken.kth.se>

when they cause the destination to expand.

To see how evil this is try this:

#include <pem.h>
main()
{
	BIGNUM *bn = NULL;
        int i;
	bn = BN_new();
	BN_hex2bn(&bn, "FFFFFFFF");
	BN_add_word(bn, 1);
	printf("Value %s\n", BN_bn2hex(bn));
}

This would typically fail before the patch.

It also screws up if you comment out the BN_hex2bn line above or in any
situation where BN_add_word() causes the number of BN_ULONGs in the result
to change (try doubling the number of FFs).

generator to typesafe stacks.

Submitted by:Tom Titchener
Reviewed by:
PR:

Submitted by:
Reviewed by:
PR:

Submitted by:
Reviewed by:
PR:

files associated with them. This stuff is all obsoleted by the new X509V3 code.

Submitted by:
Reviewed by:
PR:

X509_V_ERR_CERT_REVOKED/23 error number which can occur when a
verify callback function determined that a certificate was revoked.

New functions DSA_do_sign and DSA_do_verify to provide access to
the raw DSA values.

Submitted by:
Reviewed by:
PR:

because sgtty emulation tends to fail on various systems.
Submitted by:
Reviewed by:
PR:

Pointed out by Alexander Tyshlek <tyshlek@fuib.com> and Peter Gutmann
<pgut001@cs.auckland.ac.nz>

PR:

kludge, remove CRs from ssl_ciph.c and update Win32 functions for PKCS#12
code. It might compile under Win32 now ...

integration.

cryptographic weakness (IV reuse).

them to the build environment.