Move the X.509 trust validation code out to its own file so that it can be
generalised.
Signed-off-by: NDavid Howells <dhowells@redhat.com>