* support PKCS7 certificate parsing

* refcounts are different in 1.0.2

* rename the functions

* black

* empty commit

* review feedback

* handle unnamed-but-really-named curves in 1.0.2u

* handle openssl 1.0.2 not supporting better install commands on make

* do what openssl didn't feel was necessary in 1.0.2t/u

I didn't bind the named curve constant, fight me.

these are gone in 3.0 anyway and were removed in that draft PR

* shrink bindings more

* readd a binding we do need

* readd two more bindings we need

* remove every error we don't use in cryptography or pyopenssl

sorry external consumers, carrying things we don't use and don't have
downstream tests for has become too much of a burden

* re-add a constant we need for tests for now

* pyopenssl needs these three

X509 signing for RSA keys that are too small. Let's just say signing
failed and attach the more specific problem as the error stack. A bit
uglier, but far more generic and stable to OpenSSL/LibreSSL/BoringSSL

Also be a bit more generic for OCSP signing

the quest to stop using unstable openssl error codes continues

* start trying to make our error handling a bit more generic

* remove more and black

* attach error stack to memorylimit error

* blaaack