[xmlsec] Verify signature after certificate expired

[Rich Salz]

If you can modify openssl, look for CERT_EXPIRED in a file verify.c
Should be easy what to comment out.