for OpenSSL.

PR: 1503
Submitted by: KISA
Reviewed by: Bodo Moeller

Submitted by: ran@cryptocom.ru
Reviewed by: steve@openssl.org

ciphersuite selection code in HEAD

Submitted by: Victor Duchovni

Submitted by: Victor Duchovni

This change resolves a number of problems and obviates multiple kludges.
A new feature is that you can now say "AES256" or "AES128" (not just
"AES", which enables both).

In some cases the ciphersuite list generated from a given string is
affected by this change.  I hope this is just in those cases where the
previous behaviour did not make sense.

and allow more general RSA OIDs for ECC certs with RSA CA sig.

Submitted by: Masashi Fujita
Reviewed by: Bodo Moeller

return value from sk_SSL_CIPHER_find().

Submitted by: Douglas Stebila

Submitted by: Douglas Stebila

Submitted by: Douglas Stebila

Submitted by: Douglas Stebila

PR: 1191
Submitted by: Mika Kousa and Pasi Eronen of Nokia Corporation
Reviewed by: Nils Larsch

make "no-ssl2" work again

PR: 1217

Submitted by: Peter Sylvester

Submitted by: Peter Sylvester

 - fix indentation
 - rename some functions and macros
 - fix up confusion between SSL_ERROR_... and SSL_AD_... values

Submitted by: Peter Sylvester

Submitted by: Douglas Stebila

runtime, thus removing the need for a lock. Add a test to ssltest
to verify that the cipher lists are sorted.

for locking code. The CRYPTO_LOCK_SSL_METHOD lock is now no longer used.

    	./configure no-deprecated [no-dsa] [no-dh] [no-ec] [no-rsa]
    	make depend all test
work again

PR: 1159

have a uniform representation for those over all architectures, so a
little bit of hackery is needed.

Contributed by nagendra modadugu <nagendra@cs.stanford.edu>

("perl util/ck_errf.pl */*.c */*/*.c" still reports many more.)