Many fixes in glite util tests. Should now work correctly (previously
were not really testing things in negative cases). Added test for CRLs
with new hash.
Totally refactored namespace policy discovery for the openssl
truststore. The new mechanism is much more strict and should fix the
problems with overriding parent CA policies in sub CA ns files.
Updated openssl 1.0 format support: the original patch was not handling
namespaces and CRLs properly, only CA certs. THe fixed code requires an
explicit choice of the truststore format. By default the legacy one is
used.