This tidies up verify parameters and adds support for integrated policy
checking.

Add support for policy related command line options. Currently only in smime
application.

WARNING: experimental code subject to change.

converted to upper case or something like that), the application-
level bio_dump_cb() has a name clash with the new library function
BIO_dump_cb().  The easiest fix is to rename the function at the
application level.

PR: 499

there's no need for a larger BUFSIZE any more...

PR: 904

PR: 904

The changes have been mailed to <crypt@bis.doc.gov> as well.

PR: 903

will appear at EVP leyer.

the Makefiles. NB: this commit is probably going to generate a huge posting
and it is highly uninteresting to read.

and include bn.h in those C files that need bignum functionality.

proposed the change and submitted the patch, I jiggled it slightly and
adjusted the other parts of openssl that were affected.

PR: 867
Submitted by: Jelte Jansen
Reviewed by: Geoff Thorpe

serial number plus 1 to the output file. Its purpose is to allow
serial number files to be initialized when random serial numbers
are used.

initial serial numbers.

PR: 842

in the middle of the code on Windows, and that disrupts operations in functions
later that use rename()...
PR: 853

curves.

Submitted by: Nils Larsch

included.

functions and macros.

This change has associated tags: LEVITTE_before_const and
LEVITTE_after_const.  Those will be removed when this change has been
properly reviewed.

If -offset exceeds -length of data available exit with an error.

Don't read past end of total data available when -offset supplied.

If -length exceeds total available truncate it.

PR: #748
Submitted by: Kirill Kochetkov <kochet@ixbt.com>

This is part of a large change submitted by Markus Friedl <markus@openbsd.org>

Use BUF_strlcat() instead of strcat().
Use BIO_snprintf() instead of sprintf().
In some cases, keep better track of buffer lengths.
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>

to apps.c, and give it the hopefully descriptive name parse_yesno().