Added Feature: CrpytoProvider-independent code

[kraemv]

Hello everyone,
I want to extend rustls-compat to work with variable CryptoProviders. Additionally I added the SSL_group_to_name entrypoint, as this is required by Debian 12 nginx.

The main changes are:

• Untied the CryptoProvider from the SSLCiphers, as the provider is not static. Now I use the rustls ciphersuite to get the protocol id of an SSLCipher, as rustls ciphersuites are static.
• Use the awl_lc_rs Ticketer explicitly, as this is not covered in the CryptoProvider API.
• Added a groups field to a SSLCtx, that contains all supported groups. This allows to implement the SSL_group_to_name entrypoint. The static C Strings are taken from https://github.com/openssl/openssl/blob/eedb6df889fb69b9c4571be5616fa22e6b62dc7c/providers/common/capabilities.c#L154
• Added some more NIDs for Kyber groups

The main problem for switching the CryptoProvider in the old code was, that APIs outside the CryptoProvider API of rustls were used.

I am happy to discuss the changes!

[cpu]

Additionally I added the SSL_group_to_name entrypoint, as this is required by Debian 12 nginx.

I think it would be advantageous to split this off from the rest of the work in a separate PR.

I don't have opinions on the rest yet, but suspect it will be a more involved discussion than adding a missing API surface.

[kraemv]

I will then create two separate PRs for the two features.