X509Backend support in OpenSSL backend

This PR adds a dependency on `enum34`. I am expecting some improvements to be needed in the docs along with potentially some comments required to explain the purpose of some of the tests.

Depends on #1498.
I think this can just be `InvalidVersion`, since it'll usually be referenced as `x509.InvalidVersion`