update a couple of existing CAs that has been changed. ok beck@
remove expired certificates. ok beck@
potential fd leak (we will fix this before we move to cloning)
add class 1 and class 3 root certificates from CAcert.org. ok beck@
Merge from vendor branch OPENSSL:
import of openssl-0.9.7j
Merge from vendor branch openssl:
import of openssl-0.9.7j
import of openssl-0.9.7j
import of openssl-0.9.7j
import of openssl-0.9.7j
resolve conflicts
crank shlib_version
fix RSA signature padding vulnerability in OpenSSL libcrypto CVE-2006-4339;
ok beck@ miod@
Use S_IS* macros insted of masking with S_IF* flags. The latter may
have multiple bits set, which lead to surprising results. Spotted by
Paul Stoeber. ok djm@
openssl security fixes, diff from markus@, ok & "commit it" djm@
http://www.openssl.org/news/secadv_20060928.txt for more
Initial config for sh, copied from arm.
ok miod@ drahn@
architecture sh (landisk) is little endian.
add openssl PEM_* manpages; ok deraadt, hshoexer, djm
Fix format string misuse in kssl_err_set(), which is not
called with user-supplied strings at the moment.

ok markus@
remove two expired certificates, diff from <Christian_Rusch@genua.de>

ok jakob@
remove some bogus *p tests from charles longeau
ok deraadt millert