Updated the documentation to verify_certificate_chain. Add the decoded certificates in the returned mapping. Don't check the keyUsage of the leaf node.
Verify that the signing certificates of the trusted issuers actually is allowed to sign other certificates. I'm also more than 50% sure that the wrong certificate was used from the chain.
Improved strict types a bit.
Updated the pkix extended use list.
Add extended key usage support.
Compiler: Avoid threads_disable().

The Pike compiler now uses a dedicated reentrant lock instead
of the brute-force approach of using threads_disable().

This should improve concurrency with other threads.
Added support for extension local ASN1 types. Implemented parsing of authorityKeyIdentifier keyIdentifier (i.e. key hash).
Added partial subjectAltName support.
Implement the private types somewhat more properly.
Implement the private types somewhat more properly.
Optimizer: Fixed reference underflow in treeopt.

The reference count for reused nodes needs to be bumped once
for every occurence...

This bug was triggered at least by the empty loop ==> assignment rules,
with the effect that the free list in block alloc got corrupted.

Example code that triggered the bug:

  int i;
  array a;
  for(; i < sizeof(a); i++)
    ;