The review was mostly done out-of-band in e-mail and IRC which is a bit of a loss to history but this change was rather massive.
The in-tree functional tests are ok.
The external certification tests pass, https://op.certification.openid.net:60584
The remaining FIXME are going to have tickets generated so they can be fixed in the future. They are generally (hopefully) minor in nature, like supporting multiple signing algorithms.
ACK
rebased
Pull-Request has been merged by puiterwijk