Implement remaining OCSP verify checks in

accordance with RFC2560.

crypto/ocsp/ocsp.h

@@ -561,7 +561,11 @@ void ERR_load_OCSP_strings(void);
 #define OCSP_F_CERT_STATUS_NEW				 103
 #define OCSP_F_D2I_OCSP_NONCE				 109
 #define OCSP_F_OCSP_BASIC_VERIFY			 113
+#define OCSP_F_OCSP_CHECK_DELEGATED			 117
+#define OCSP_F_OCSP_CHECK_IDS				 114
+#define OCSP_F_OCSP_CHECK_ISSUER			 115
 #define OCSP_F_OCSP_CHECK_NONCE				 112
+#define OCSP_F_OCSP_MATCH_ISSUERID			 116
 #define OCSP_F_OCSP_RESPONSE_GET1_BASIC			 111
 #define OCSP_F_OCSP_SENDREQ_BIO				 110
 #define OCSP_F_REQUEST_VERIFY				 104
@@ -577,15 +581,18 @@ void ERR_load_OCSP_strings(void);
 #define OCSP_R_FAILED_TO_OPEN				 109
 #define OCSP_R_FAILED_TO_READ				 110
 #define OCSP_R_FAILED_TO_STAT				 111
+#define OCSP_R_MISSING_OCSPSIGNING_USAGE		 131
 #define OCSP_R_MISSING_VALUE				 112
 #define OCSP_R_NONCE_MISSING_IN_RESPONSE		 121
 #define OCSP_R_NONCE_VALUE_MISMATCH			 122
 #define OCSP_R_NOT_BASIC_RESPONSE			 120
 #define OCSP_R_NO_CERTIFICATE				 102
+#define OCSP_R_NO_CERTIFICATES_IN_CHAIN			 128
 #define OCSP_R_NO_CONTENT				 115
 #define OCSP_R_NO_PUBLIC_KEY				 103
 #define OCSP_R_NO_RESPONSE_DATA				 104
 #define OCSP_R_NO_SIGNATURE				 105
+#define OCSP_R_RESPONSE_CONTAINS_NO_REVOCATION_DATA	 129
 #define OCSP_R_REVOKED_NO_TIME				 106
 #define OCSP_R_ROOT_CA_NOT_TRUSTED			 127
 #define OCSP_R_SERVER_READ_ERROR			 116
@@ -595,6 +602,7 @@ void ERR_load_OCSP_strings(void);
 #define OCSP_R_SIGNATURE_FAILURE			 124
 #define OCSP_R_SIGNER_CERTIFICATE_NOT_FOUND		 125
 #define OCSP_R_UNEXPECTED_NONCE_IN_RESPONSE		 123
+#define OCSP_R_UNKNOWN_MESSAGE_DIGEST			 130
 #define OCSP_R_UNKNOWN_NID				 107
 #define OCSP_R_UNSUPPORTED_OPTION			 113
 #define OCSP_R_VALUE_ALREADY				 114