* upgrade openssl in CI and patch around 3.0.6 bug

* changelog and version bump for 38.0.2

* fix parsing for CRLs with TLVs > 65535 bytes (#7575)

* add CRL test vector with 9,999 revoked items

* bump rust-asn1

* add large CRL test

this tests CRLs larger than 65535 bytes in size. rust-asn1 supports up
to 4GiB TLVs now, but we'll avoid putting a test vector that big for now

* changelog and 38.0.1 bump

* support setting more PKCS12 serialization encryption options

This is limited support, but makes it possible to set two different PBES
choices as well as set KDF rounds and MAC algorithm

* Apply suggestions from code review

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>

* review feedback redux

* Update docs/hazmat/primitives/asymmetric/serialization.rst

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>

These let developers be more explicit about the allowable key lengths
for an AES key and make auditing the codebase a bit easier.

But that's not really why we're adding them. In some upcoming
serialization features we need to be able to specify AES 128 vs AES 256
and the current class doesn't work for that since it computes key
length from the key you provide it when instantiating the class.
That's incompatible with serialization where the key is derived
later in the process. C'est la vie.

* Fix issue #7513 - parsing of RFC4514 strings should reverse the order of RDNs

* Solving code formating issues

* Adding comment justifing the reversal of rdns on the RFC4514 parser

* Comment changes on CHANGELOG.rst

* fixing a typo on method link at CHANGELOG.rst

* Removing reference to protected class _RFC4514NameParser from CHANGELOG.rst

Co-authored-by: Alexandre Machado <alexandre@softnex.com.br>