confirm that we want to validate crl in the crl spec
add crl_file to validator options
bring certs and keys for client certs along
spec out the (frankly awful) client cert usage
use the certs from riak-python-client
Merge branch 'master' into bk-tls-client-certs
document security features
Add errors for smarter security attribute setting.
Allows cert, client_ca, and key parameters to be string-encoded keys or
filenames, instead of just materialized openssl objects
use new simpler api for authentication parameters
Document support for friendlier authentication parameters
yank some http gems
socket spec more tolerant of improved tls apis
add correct cert revocation list
fix username in buildbot config
make server cert match ca
update beefcake
remove affordances for old beefcake's "fields" usage
add ca_file to security config
add certuser to buildbot config