Add http_anchors and http_revoke settings

Add http_anchors and http_revoke settings, mimicking both the locations
and effects of their similarly-named PKINIT counterparts, but affecting
HTTPS connections to KDC proxy servers.
Add an http_hostname option

Add an http_hostname option, though for now it only specifies alternate
CN values that we'd accept in the server's certificate's subject name
field.
Support dnsName subjectAltName hostname matching

Parse subjectAltName extensions when checking for a hostname match,
which also requires that we accept certificates without subject names.
Mention that MS-KKDCP also encrypts names
Differentiate HTTPS and TCP trace messages
Add certificates for a testing MS-KKDCP proxy
Add a simple KDC proxy test server

This proxy server uses python-paste to run the kdcproxy from
https://pypi.python.org/pypi/kdcproxy.  It should be used along
with the proxy.pem certificate in ../tests/dejagnu/proxy-certs.
Learn to start and stop the test MS-KKDCP proxy
Add a test for MS-KKDCP client support