add `get_digest` method to `X509Req`

(depends on bwhmather/cryptography@1b55947c).
Writing a simple ca and need to be able verify that a certificate request received by the server is the same as the one sent by the client.  Comparing digests seems like the obvious way to do it.
You can write this as `_ffi.new("unsigned int *", len(result_buffer))`