CHANGELOG:

• update Bouncy-Castle to 1.61 (and handle supported BC compatibility)
• [fix] avoid NPE when CRL fails to parse (invalid str) (OpenSSL::X509::CRL.new('') raises NPE #5619)
• hide (deprecated) Jopenssl constant
• default OpenSSL.warn to warnings-enabled flag
• only un-restrict jce when its restricted
• OpenSSL::Cipher#update additional buffer argument (sass/engine.rb can't compile on master/1.9 #170) (OpenSSL::Cipher#update doesn't accept a buffer argument #5242)