expose SSL_get_peer_cert_chain, SSL_get_client_CA_list, and SSL_CTX_set_client_CA_list

I guess these were skipped because of the weird STACK_OF/stack_st... issue.

Suggestions for some other approach welcome.