Make the path to request on the server configurable.
Make output easier to understand.
Split server verification into its own test and support DTCP X.509 certificates.
Explicitly check that DTCP certificates are valid.
Simplify running external programs.
Include HTTP status in output.
Move return code checking and HTTP status code checking into Test._run_program().
Ignore HTTP response when looking at OpenSSL output.
Add output explaining why we make a second connection if the X.509 certificate doesn't pass verification.
Add an error if we can't find the HTTP response header.
Remove unnecessary chain certificate in root-ca.pem.
Update root-ca.pem.
Ignore certificate purposes, since our current DTLA certificates aren't "sslserver" certificates.
Don't decode the output from s_client, since it's not always valid UTF-8.
Merge pull request #1 from cablelabs/master

Sync with upstram