crypto/x509: exempt broken Entrust certificate from checks.
crypto/x509: exempt broken Entrust certificate from checks.

Entrust have issued a root certificate that's not marked as valid for
signing certificates.

This results in Go programs failing to validate certificates that
chain up to this root (i.e. gateway.push.apple.com:2195).

Although this is clearly a mistake on Entrust's part, it seems that we
will have to bodge around it.

R=golang-dev, dave, r
CC=golang-dev
http://codereview.appspot.com/6346064

apparentlymart/golang,tv42/old-go,tv42/old-go,gnanderson/go,gnanderson/go,dsriram/golang,apparentlymart/golang,dsriram/golang,pombredanne/go-deleteme,dsriram/golang,dsriram/golang,apparentlymart/golang,pombredanne/go-deleteme,dsriram/golang,pombredanne/go-deleteme,pombredanne/go-deleteme,pombredanne/go-deleteme,apparentlymart/golang,tv42/old-go,pombredanne/go-deleteme,gnanderson/go,dsriram/golang,apparentlymart/golang,tv42/old-go,gnanderson/go,apparentlymart/golang,tv42/old-go,apparentlymart/golang,gnanderson/go,pombredanne/go-deleteme,tv42/old-go,tv42/old-go,gnanderson/go,dsriram/golang,gnanderson/go