Revision 33677

   Fix a few issues in GSI authentication:
     - Correctly treat possible CA certificates in proxy certificates;
     - Export also non-selfsigned CA certificate in proxy buckets
     - Some improvements in XrdCryptoX509Chain::Reorder.

   This patch fixes a fake failure with proxies created by voms-proxy-init when the input
   certificates are PKCS12-formatted