denser: s/IN-ADDR.ARPA/in-addr.arpa/g

Both are correct and nameservers *must* treat them identically,
but there's a widespread bug in Cisco firewalls that results in
broken reverse lookups when the request is uppercase.

Stupid Cisco.
outbound TSL test
decouple smtps and tls
indentation change
tls take 2
Remove erroneous chunk in tls.c

We can't do anything with the peer certificate here, this is just
initialisation of the SSL options.
Add cert verification in smtp_connect
Remove commented-out code

CVE-2011-0411 is potentially applicable to clients, but since they're
looking for return codes rather than executing commands it's less
interesting. The only outcome I can imagine for a successful injection is
that the client will be confused by the extra data, which is...whatever.
Check result of sending STARTTLS before trying to negotiate
tls_client_setup: Always load the CA (if configured)
Resend EHLO after successful TLS negotiation
Make smtp_connect more testing-friendly