basic unit test for FIDO kep parsing

sure enough, some of the test data that we though were in new format
were actually in the old format; fix from Michael Forney

make mktestdata.sh generate old/new format keys that we expect.
This script was written before OpenSSH switched to new-format private
keys by default and was never updated to the change (until now)
From Michael Forney

portability fix for sed that always emil a newline even if the
input does not contain one; from Michael Forney

Include certs with multiple RSA signature variants in test data
Ensure that cert->signature_key is populated correctly

remove SSHv1 support from unit tests

adapt tests to new minimum RSA size and default FP format

more and better key tests

test signatures and verification
test certificate generation
flesh out nested cert test

removes most of the XXX todo markers

Add $OpenBSD tag to make syncs easier

Sign test certs with ed25519 instead of ecdsa so that they'll work in
-portable on platforms that don't have ECDSA in their OpenSSL. ok djm

unit and fuzz tests for new key API

sure enough, some of the test data that we though were in new format
were actually in the old format; fix from Michael Forney

make mktestdata.sh generate old/new format keys that we expect.
This script was written before OpenSSH switched to new-format private
keys by default and was never updated to the change (until now)
From Michael Forney

portability fix for sed that always emil a newline even if the
input does not contain one; from Michael Forney

Include certs with multiple RSA signature variants in test data
Ensure that cert->signature_key is populated correctly

remove SSHv1 support from unit tests

adapt tests to new minimum RSA size and default FP format

more and better key tests

test signatures and verification
test certificate generation
flesh out nested cert test

removes most of the XXX todo markers

Add $OpenBSD tag to make syncs easier

Sign test certs with ed25519 instead of ecdsa so that they'll work in
-portable on platforms that don't have ECDSA in their OpenSSL. ok djm

unit and fuzz tests for new key API

Include certs with multiple RSA signature variants in test data
Ensure that cert->signature_key is populated correctly

remove SSHv1 support from unit tests

adapt tests to new minimum RSA size and default FP format

more and better key tests

test signatures and verification
test certificate generation
flesh out nested cert test

removes most of the XXX todo markers

Add $OpenBSD tag to make syncs easier

Sign test certs with ed25519 instead of ecdsa so that they'll work in
-portable on platforms that don't have ECDSA in their OpenSSL. ok djm

unit and fuzz tests for new key API