PR: 2963 and a number of others

Submitted by: Pierre Delaage

definitions from e_os.h

the trust store.

revert OCSP_basic_verify changes: they aren't needed now we support partial chain verification and can pass verify options to ocsp utility

The modification to the OCSP helper purpose breaks normal OCSP verification.
It is no longer needed now we can trust partial chains.

trusted store instead of the default which is to return an error if
we can't build the complete chain.

Use -1 to check all extensions in CRLs.
Always set flag for freshest CRL.

Add new verify options to set checks.

Remove previous -check* commands from s_client and s_server.

Submitted by: jean-etienne.schwartz@bull.net

In OCSP_basic_varify return an error if X509_STORE_CTX_init fails.

structures using HTTP. Add wrapper function to handle CRL download.

from X509_STORE_CTX.

Make ASN1_UTCTIME_cmp_time_t more robust by using the new time functions.

PR: 2909

Update test cases to cover internal error return values.

Remove IDNA wildcard filter.