dnscert: Add DNS CERT support for pubkey authentication

Add DNSSEC protected CERT RR delivered certificate authentication.
The new dnscert plugin is based on the ipseckey plugin and relies on the
existing PEM decoder as well as x509 and PGP parsers.  As such the plugin
expects PEM encoded PKIX(x509) or PGP(GPG) certificate payloads.

The plugin is targeted to improve interoperability with Racoon, which
supports this type of authentication, ignoring in-stream certificates
and using only DNS provided certificates for FQDN IDs.

src/libcharon/Makefile.am

@@ -216,6 +216,13 @@ if MONOLITHIC
 endif
 endif
 
+if USE_DNSCERT
+  SUBDIRS += plugins/dnscert
+if MONOLITHIC
+  libcharon_la_LIBADD += plugins/dnscert/libstrongswan-dnscert.la
+endif
+endif
+
 if USE_IPSECKEY
   SUBDIRS += plugins/ipseckey
 if MONOLITHIC