@@ -1,11 +1,11 @@
 /*
  * Copyright (C) 1997-1999 Matt Newman <matt@novadigm.com>
  * some modifications:
  *	Copyright (C) 2000 Ajuba Solutions
  *	Copyright (C) 2002 ActiveState Corporation
- *	Copyright (C) 2004 Starfish Systems 
+ *	Copyright (C) 2004 Starfish Systems
  *
  * TLS (aka SSL) Channel - can be layered on any bi-directional
  * Tcl_Channel (Note: Requires Trf Core Patch)
  *
  * This was built (almost) from scratch based upon observation of
@@ -210,14 +210,14 @@
 	else if (where & SSL_CB_LOOP)		minor = "loop";
 	else if (where & SSL_CB_EXIT)		minor = "exit";
 	else					minor = "unknown";
     }
 
-    Tcl_ListObjAppendElement( statePtr->interp, cmdPtr, 
+    Tcl_ListObjAppendElement( statePtr->interp, cmdPtr,
 	    Tcl_NewStringObj( "info", -1));
 
-    Tcl_ListObjAppendElement( statePtr->interp, cmdPtr, 
+    Tcl_ListObjAppendElement( statePtr->interp, cmdPtr,
 	    Tcl_NewStringObj( Tcl_GetChannelName(statePtr->self), -1) );
 
     Tcl_ListObjAppendElement( statePtr->interp, cmdPtr,
 	    Tcl_NewStringObj( major, -1) );
 
@@ -295,14 +295,14 @@
 	    return 1;
 	}
     }
     cmdPtr = Tcl_DuplicateObj(statePtr->callback);
 
-    Tcl_ListObjAppendElement( statePtr->interp, cmdPtr, 
+    Tcl_ListObjAppendElement( statePtr->interp, cmdPtr,
 	    Tcl_NewStringObj( "verify", -1));
 
-    Tcl_ListObjAppendElement( statePtr->interp, cmdPtr, 
+    Tcl_ListObjAppendElement( statePtr->interp, cmdPtr,
 	    Tcl_NewStringObj( Tcl_GetChannelName(statePtr->self), -1) );
 
     Tcl_ListObjAppendElement( statePtr->interp, cmdPtr,
 	    Tcl_NewIntObj( depth) );
 
@@ -381,14 +381,14 @@
 	Tcl_BackgroundError( statePtr->interp);
 	return;
     }
     cmdPtr = Tcl_DuplicateObj(statePtr->callback);
 
-    Tcl_ListObjAppendElement(statePtr->interp, cmdPtr, 
+    Tcl_ListObjAppendElement(statePtr->interp, cmdPtr,
 	    Tcl_NewStringObj("error", -1));
 
-    Tcl_ListObjAppendElement(statePtr->interp, cmdPtr, 
+    Tcl_ListObjAppendElement(statePtr->interp, cmdPtr,
 	    Tcl_NewStringObj(Tcl_GetChannelName(statePtr->self), -1));
 
     Tcl_ListObjAppendElement(statePtr->interp, cmdPtr,
 	    Tcl_NewStringObj(msg, -1));
 
@@ -406,11 +406,11 @@
 }
 
 /*
  *-------------------------------------------------------------------
  *
- * PasswordCallback -- 
+ * PasswordCallback --
  *
  *	Called when a password is needed to unpack RSA and PEM keys.
  *	Evals any bound password script and returns the result as
  *	the password string.
  *-------------------------------------------------------------------
@@ -1195,11 +1195,11 @@
 #if !defined(NO_TLS1_3)
 	off |= (ENABLED(proto, TLS_PROTO_TLS1_3) ? 0 : SSL_OP_NO_TLSv1_3);
 #endif
 	break;
     }
-    
+
     ctx = SSL_CTX_new (method);
 
     if (!ctx) {
         return(NULL);
     }
@@ -1208,11 +1208,11 @@
     if (proto == TLS_PROTO_TLS1_3) {
         SSL_CTX_set_min_proto_version (ctx, TLS1_3_VERSION);
         SSL_CTX_set_max_proto_version (ctx, TLS1_3_VERSION);
     }
 #endif
-    
+
     SSL_CTX_set_app_data( ctx, (void*)interp);	/* remember the interpreter */
     SSL_CTX_set_options( ctx, SSL_OP_ALL);	/* all SSL bug workarounds */
     SSL_CTX_set_options( ctx, off);	/* all SSL bug workarounds */
     SSL_CTX_sess_set_cache_size( ctx, 128);
 
@@ -1246,11 +1246,11 @@
 		Tcl_AppendResult(interp,
 		    "Could not find DH parameters file", (char *) NULL);
 		SSL_CTX_free(ctx);
 		return (SSL_CTX *)0;
 	    }
-	    
+
 	    dh = PEM_read_bio_DHparams(bio, NULL, NULL, NULL);
 	    BIO_free(bio);
 	    Tcl_DStringFree(&ds);
 	    if (!dh) {
 		Tcl_AppendResult(interp,
@@ -1373,11 +1373,11 @@
 
     /* https://sourceforge.net/p/tls/bugs/57/ */
     /* XXX:TODO: Let the user supply values here instead of something that exists on the filesystem */
     if ( CAfile != NULL ) {
         STACK_OF(X509_NAME) *certNames = SSL_load_client_CA_file( F2N(CAfile, &ds) );
-	if ( certNames != NULL ) { 
+	if ( certNames != NULL ) {
 	    SSL_CTX_set_client_CA_list(ctx, certNames );
 	}
     }
 
     Tcl_DStringFree(&ds);
@@ -1558,11 +1558,11 @@
 	    BIO *out=NULL;
 
 	    char *k_C="",*k_ST="",*k_L="",*k_O="",*k_OU="",*k_CN="",*k_Email="";
 	    char *keyout,*pemout,*str;
 	    int keysize,serial=0,days=365;
-	    
+
 	    if ((objc<5) || (objc>6)) {
 		Tcl_WrongNumArgs(interp, 2, objv, "keysize keyfile certfile ?info?");
 		return TCL_ERROR;
 	    }
 
@@ -1634,11 +1634,11 @@
 		X509_set_version(cert,2);
 		ASN1_INTEGER_set(X509_get_serialNumber(cert),serial);
 		X509_gmtime_adj(X509_get_notBefore(cert),0);
 		X509_gmtime_adj(X509_get_notAfter(cert),(long)60*60*24*days);
 		X509_set_pubkey(cert,pkey);
-		
+
 		name=X509_get_subject_name(cert);
 
 		X509_NAME_add_entry_by_txt(name,"C", MBSTRING_ASC, (unsigned char *) k_C, -1, -1, 0);
 		X509_NAME_add_entry_by_txt(name,"ST", MBSTRING_ASC, (unsigned char *) k_ST, -1, -1, 0);
 		X509_NAME_add_entry_by_txt(name,"L", MBSTRING_ASC, (unsigned char *) k_L, -1, -1, 0);
@@ -1821,11 +1821,11 @@
  *------------------------------------------------------*
  *
  *	Tls_SafeInit --
  *
  *	------------------------------------------------*
- *	Standard procedure required by 'load'. 
+ *	Standard procedure required by 'load'.
  *	Initializes this extension for a safe interpreter.
  *	------------------------------------------------*
  *
  *	Sideeffects:
  *		As of 'Tls_Init'
@@ -1936,11 +1936,11 @@
     /*
      * Seed the random number generator in the SSL library,
      * using the do/while construct because of the bug note in the
      * OpenSSL FAQ at http://www.openssl.org/support/faq.html#USER1
      *
-     * The crux of the problem is that Solaris 7 does not have a 
+     * The crux of the problem is that Solaris 7 does not have a
      * /dev/random or /dev/urandom device so it cannot gather enough
      * entropy from the RAND_seed() when TLS initializes and refuses
      * to go further. Earlier versions of OpenSSL carried on regardless.
      */
     srand((unsigned int) time((time_t *) NULL));