verify_fun/3 receive cert as binary instead of OTPCertificate record

[benbro]

Describe the bug
public_key.erl calls pubkey_cert:apply_fun/5 in two places.
Line 1713:

try pubkey_cert:apply_fun(VerifyFun, Cert#cert.otp, Cert#cert.der, Reason, Userstat0) of

Line 2422:

try pubkey_cert:apply_fun(VerifyFun, OtpCert, DerCert, Reason, UserState0) of

pubkey_cert:apply_fun/5 reverses the order of OtpCert and DerCert and calls the user supplied verify_fun with DerCert instead of OtpCert:

apply_fun(Fun, DerCert, OtpCert, Result, UserState) ->
    if is_function(Fun, 4) ->
            Fun(OtpCert, DerCert, Result, UserState);
       is_function(Fun, 3) ->
            Fun(OtpCert, Result, UserState)
    end.

Affected versions
27.1

[IngelaAndin]

Well actual it called forma third place most of the time where the order is correct, but good catch we will fix.

[lhoguin]

A RabbitMQ plugin is also impacted. Thankfully we do not currently support OTP-27.