Tim Hudson

How does the test actually test that the libctx is used for anything - i.e. the purpose of the variant of the function?

Reading through the code, this is an improvement and accessor functions make sense (to me) - given that there is no real disadvantage and the abstraction has a clear advantage....

Still approved

Still approved (making me have to work harder at reviewing the changes ...)

> Of course if anyone has AVX512_IFMA capable machine and/or the Intel SDE installation readily available, it would be welcome to test this right away. It is trivial to set...

The FAQ should **just** point to the wiki where anyone who has an engine can update the details. I don't think we should have a partial list of any engines...

Nice to see this being tackled - I too saw that we would have some "fun" with this issue where we have had size_t logic get put in a few...

Looks good to me in terms of improving what we currently have ...

@t8m is correct in my view to see this as a feature request - we don't document that we use the cert_chain in OCSP contexts - if we did document...

@t8m why tests-exempted here - I'd expect some exercise of the new capability to be added as a test ...