verify that public key of private key and certificate match
return parsed certificate list in order
let common_name_to_string receive a certificate
provide a printer for certificate_failures
export printing methods for common_name and certificate_failure
verify given certificate chain, assuming topmost as trust anchor
Merge pull request #113 from mirleft/config-fixes

Config fixes
X509 versions are 0 -> V1 ; 1 -> V2 ; 2 -> V3 -- fix that mapping here!
bail on unknown version
Merge pull request #114 from mirleft/x509-tests-and-fixes

X509 tests and fixes
a V1/V2 certificate must not have any V3 extensions
style
style: rename subject to subject_common_name
use subject common name as well as subject alternative name as hostnames of the cert
introduce version_matches_extensions (which assures that V1 and V2 do not contain extensions);
and use this function in is_cert_valid, is_ca_cert_valid, is_server_cert_valid
fix wildcard matching: foobar.com matches *.foobar.com
check that if a ca certificate has an extended key usage, this must be any
 (will be refined once we support OCSP)
style
allow ext_authority_matches_subject to pass if either certificate does not have the
requested extension
introduce new test module X509tests