Submitted by: Pierre Delaage

PR: 2821
Submitted by: Dmitry Belyavsky, Serguei Leontiev

suggestions from Pierre Delaage).

Submitted by: Pierre Delaage

The modification to the OCSP helper purpose breaks normal OCSP verification.
It is no longer needed now we can trust partial chains.

Don't verify our own responses.

Recognise verification arguments.

trusted store instead of the default which is to return an error if
we can't build the complete chain.

Just a sample, real world applications would have to be cleverer.

Use -1 to check all extensions in CRLs.
Always set flag for freshest CRL.

Add new verify options to set checks.

Remove previous -check* commands from s_client and s_server.