It wasn't related to openssl.

As fallback shall be always possible make binding really immune to any problems
in networkcache including name errors, api changes, syntax errors, etc.

Squashed commit of the following:

commit 2c3b7f2f
Author: Łukasz Nowak <luke@nexedi.com>
Date:   Wed Aug 31 16:36:18 2011 +0200

    Prove that keys are passed to libnetworkcache.

commit c380b1ea
Author: Łukasz Nowak <luke@nexedi.com>
Date:   Wed Aug 31 15:42:05 2011 +0200

    Support shacache and dir SSL based auth.

Thanks to (un)patching urllib before importing zc.buildout.download no more
M2Crypto cluttering is done.

This allows complex library usage in bootstrap process.

Certificates to check content are provided as inline strings.

also convert those certificates correctly.

Convert buildout emptiness to Nones.

Certificates to check content are provided inline.

Use signature_certificate_list if strings instead of signature_certificate_file.
Additionaly simplify backward compatbility: just do not play with it.

Use simple download recipe instead of relying on egg downloading.

In addition comment why it does not work.

Instead use provided system level tools to generate keys.

This reverts commit bfe5fb83.

After merging the master branch inside the signature branch of
slapos.libnetworkcache it is required to fix some error messages.

Thanks to 4784a35e, which does buildout
"patching" procedure in test it is not required to provide testnc.

By the way revert "Revert "Revert "Allow to find slapos.libnetworkcache during
test.""" (commit 0fbf2ccf ), as it is not
required anymore.

Whenever special sign ? is found in url analyse it in order to have
correct filename.

In case of http://host/path/filename/? use "filename" as part to
generate filename.

This fuzzy logic allows to generate quite sane filenames.