In ssl3_get_cert_verify(), allow for larger messages to accomodate keys
larger than 4096-bit RSA which the most paranoid of us are using; OpenSSL
PR #319 via OpenSSL trunk.
In RSA_eay_private_encrypt(), correctly return the smaller BN; OpenSSL
PR #3418 via OpenSSL trunk
OPENSSL_ALGORITHM_DEFINES has been removed from conf.h, no need for it now
Missing bounds check in do_PVK_body(); OpenSSL RT #2277, from OpenSSL trunk,
but without a memory leak.
Prevent infinite loop during configuration file parsing; OpenSSL PR #2985
via OpenSSL trunk.
Fix a memory leak in BIO_free() which no current BIO can trigger; OpenSSL
PR #3439 via OpenSSL trunk
Avoid invoking EVP_CIPHER_CTX_cleanup() on uninitialized memory; from
Coverity via OpenSSL trunk
If the application uses tls_session_secret_cb for session resumption, set
the CCS_OK flag. From OpenSSL trunk.
Huge documentation update for libcrypto and libssl, mostly from Matt Caswell,
Jeff Trawick, Jean-Paul Calderone, Michal Bozon, Jeffrey Walton and Rich Salz,
via OpenSSL trunk (with some parts not applying to us, such as SSLv2 support,
at least partially removed).
adapt addapt spelling to adapt; request from miod
Modify formatting to make portable's life a lot easier.
ok miod@ bcook@
add comment about format requirements
ok miod@