SSL_CTX and SSL, functions to set them and defaults if no values set.

some utilities that should have used RANDFILE did not,
and -rand handling was broken except in genrsa.

explicitly. Previously it couldn't be changed because it was hard coded as
"server.pem".

buffer (which leads to truncation of client cipher list).

an improvement on not working at all.

LFs into CRLFs when forwarding data from stdin to the TLS connection.
This is necessary for properly talking HTTP.
Because of the code freeze this change is by default disabled for now;
without -DAPPS_CRLF, the code is exactly as before.

Submitted by: Richard Levitte <levitte@stacken.kth.se>

and to lots of PEM_... functions.
Submitted by: Damien Miller <dmiller@ilogic.com.au>

Pointed out by: Janez Jere <jj@void.si>

also for NeXT).

Submitted by: Martin Kraemer <Martin.Kraemer@MchP.Siemens.De>

Pointed out by Sergio Rabellino <Rabellino@di.unito.it>

While modifying the sources, I found some inconsistencies on the use of
s->cert vs. s->session->sess_cert; I don't know if those could
really have caused problems, but possibly this is a proper bug-fix
and not just a clean-up.

Submitted by: Richard Levitte <richard@levitte.org>

Submitted by:
Reviewed by:
PR:

because they are useful for the DSA situation and should be recognized by the
users. Thanks to Steve for the original hint.

I wonder what eay.c is?