OpenSSL::TestX509CRL regressions

[mkristian]

test_extension:
[/home/travis/build/jruby/jruby/test/externals/ruby1.9/openssl/test_x509crl.rb:159]:
<"authorityKeyIdentifier"> expected but was
<"issuerAltName">.

test_revoked:
Java::JavaLang::IllegalArgumentException: illegal object in getInstance: org.bouncycastle.asn1.DLSequence
org.bouncycastle.asn1.DERObjectIdentifier.getInstance(Unknown Source)
org.bouncycastle.asn1.x509.X509Extensions.(Unknown Source)

see also end of https://s3.amazonaws.com/archive.travis-ci.org/jobs/43629181/log.txt

[kares]

yep ~ same here (one fixed new failed) ... although slicely different.

there's 2 ways to approach CRL :

using JCE or direct BC APIs in the first case extension order can not be guaranteed, so we should move that tests without assuming array order into our part (probably already done).
when using BC APIs directly it still might not be an exact match (not 100% sure on this but probably depends on BC version used) ...

  3) Failure:
test_revoked(OpenSSL::TestX509CRL) [/home/kares/workspace/oss/jruby/test/externals/ruby1.9/openssl/test_x509crl.rb:92]:
<"Key Compromise"> expected but was
<"Unspecified">.

  4) Error:
test_sign_and_verify(OpenSSL::TestX509CRL):
Java::JavaLang::ClassCastException: org.bouncycastle.asn1.ASN1Enumerated cannot be cast to org.bouncycastle.asn1.ASN1Sequence
    org.bouncycastle.crypto.signers.DSADigestSigner.derDecode(Unknown Source)
    org.bouncycastle.crypto.signers.DSADigestSigner.verifySignature(Unknown Source)
    org.bouncycastle.operator.bc.BcSignerOutputStream.verify(Unknown Source)
    org.bouncycastle.operator.bc.BcContentVerifierProviderBuilder$SigVerifier.verify(Unknown Source)
    org.bouncycastle.cert.X509CRLHolder.isSignatureValid(Unknown Source)
    org.jruby.ext.openssl.X509CRL.verify(X509CRL.java:766)
    org.jruby.ext.openssl.X509CRL$INVOKER$i$1$0$verify.call(X509CRL$INVOKER$i$1$0$verify.gen)

[mkristian]

this basically includes a better fix for #20