* fix parsing for CRLs with TLVs > 65535 bytes (#7575)

* add CRL test vector with 9,999 revoked items

* bump rust-asn1

* add large CRL test

this tests CRLs larger than 65535 bytes in size. rust-asn1 supports up
to 4GiB TLVs now, but we'll avoid putting a test vector that big for now

* changelog and 38.0.1 bump

* support setting more PKCS12 serialization encryption options

This is limited support, but makes it possible to set two different PBES
choices as well as set KDF rounds and MAC algorithm

* Apply suggestions from code review

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>

* review feedback redux

* Update docs/hazmat/primitives/asymmetric/serialization.rst

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>

These let developers be more explicit about the allowable key lengths
for an AES key and make auditing the codebase a bit easier.

But that's not really why we're adding them. In some upcoming
serialization features we need to be able to specify AES 128 vs AES 256
and the current class doesn't work for that since it computes key
length from the key you provide it when instantiating the class.
That's incompatible with serialization where the key is derived
later in the process. C'est la vie.

* KBKDF: add CounterLocation.MiddleFixed

* tests_kbkdf: add new tests

- Test CounterLocation.MiddleFixed and blocation=

* test_kbkdf_vectors: make use of MIDDLE_FIXED

* docs: document KBKDF CounterLocation.MiddleFixed

* s/blocation/break_location/g

* CHANGELOG: document KBKDF{HMAC,CMAC} CounterLocation.MiddleFixed #7489

* kbkdf: fixed is static across n iterations, only the counter changes

* kbkdf: check break_location is 0..len(fixed)

- Update tests to assert exception is raised when
    break_location < 0 or > len(fixed)

- When asserting for "break_location is ignored when MiddleFixed",
    use break_location=0 instead of =10,
    to ensure we don't raise because of break_location > len(fixed)

- Assert that the right error messages are returned to the user.

* kbkdf: keyword-only break_location

* docs: document kw-only KBKDF{HMAC,CMAC}