gnutls/resumption-with-OpenSSL: Test extension

[mrc0mmand]

This PR extends the gnutls/resumption-with-OpenSSL test with following:

• Various combinations of KEX, MAC and PRF algorithms
• Use the certgen library instead direct OpenSSL for cert operations
• Resumption with client authentication, session IDs and tickets

Following scenarios are failing:

GNUTLS <-> OpenSSL [TLS_RSA_WITH_AES_128_CBC_SHA, tls1_2, sessionID, client auth]
GNUTLS <-> OpenSSL [TLS_RSA_WITH_AES_128_CBC_SHA, tls1_1, sessionID, client auth]
GNUTLS <-> OpenSSL [TLS_RSA_WITH_AES_256_CBC_SHA256, tls1_2, sessionID, client auth]
GNUTLS <-> OpenSSL [TLS_RSA_WITH_AES_128_GCM_SHA256, tls1_2, sessionID, client auth]
GNUTLS <-> OpenSSL [TLS_RSA_WITH_AES_256_GCM_SHA384, tls1_2, sessionID, client auth]
GNUTLS <-> OpenSSL [TLS_DHE_RSA_WITH_AES_128_CBC_SHA, tls1_2, sessionID, client auth]
GNUTLS <-> OpenSSL [TLS_DHE_RSA_WITH_AES_128_CBC_SHA, tls1_1, sessionID, client auth]
GNUTLS <-> OpenSSL [TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, tls1_2, sessionID, client auth]
GNUTLS <-> OpenSSL [TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, tls1_2, sessionID, client auth]
GNUTLS <-> OpenSSL [TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, tls1_2, sessionID, client auth]
GNUTLS <-> OpenSSL [TLS_DHE_DSS_WITH_AES_128_CBC_SHA, tls1_2, sessionID, client auth]
GNUTLS <-> OpenSSL [TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, tls1_2, sessionID, client auth]
GNUTLS <-> OpenSSL [TLS_DHE_DSS_WITH_AES_128_GCM_SHA256, tls1_2, sessionID, client auth]
GNUTLS <-> OpenSSL [TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, tls1_2, sessionID, client auth]
GNUTLS <-> OpenSSL [TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, tls1_2, sessionID, client auth]
GNUTLS <-> OpenSSL [TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, tls1_1, sessionID, client auth]
GNUTLS <-> OpenSSL [TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, tls1_2, sessionID, client auth]
GNUTLS <-> OpenSSL [TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, tls1_2, sessionID, client auth]
GNUTLS <-> OpenSSL [TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, tls1_2, sessionID, client auth]

In all these scenarios a new session is created instead of using a cached one. Also, TLS_DHE_DSS_WITH_AES_128_CBC_SHA with TLS 1.1 is failing because of unsupported DSA key length - see this comment for proposed solution.

[tomato42]

what's the gnutls bug for it?