Adding -verify and expanding -x509 options for our OpenSSL tool

[smittals2]

Issues:

CryptoAlg-2679

Description of changes:

• -subject and -fingerprint options added to the x509 tool
• A new verify tool with -CAfile
  • The verify tool takes a file as input or defaults to reading from stdin

Callouts:

The subject field differs in OpenSSL master and versions <= 3.2. A normalization function that removes whitespaces is used to compare output.

Testing:

Added option tests for new functionality and OpenSSL comparison tests for the new options.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and the ISC license.

[codecov-commenter]

Codecov Report

Attention: Patch coverage is 54.27350% with 107 lines in your changes missing coverage. Please review.

Please upload report for BASE (main@8d9809e). Learn more about missing BASE report.

Files with missing lines	Patch %	Lines
tool-openssl/x509_test.cc	30.64%	43 Missing ⚠️
tool-openssl/verify_test.cc	41.66%	35 Missing ⚠️
tool-openssl/verify.cc	72.82%	25 Missing ⚠️
tool-openssl/x509.cc	80.00%	4 Missing ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1951   +/-   ##
=======================================
  Coverage        ?   78.79%           
=======================================
  Files           ?      587           
  Lines           ?   101164           
  Branches        ?    14345           
=======================================
  Hits            ?    79716           
  Misses          ?    20813           
  Partials        ?      635           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.