test(integv2): reduce parameter selection

[johubertj]

Resolved issues:

Integ test bloat #4375

Description of changes:

1. Keep ALL_TEST_CERTS as is
2. only test_happy_path.py will use ALL_TEST_CERTS (preserve coverage)
3. all other tests will use MINIMAL_TEST_CERTS
4. add ECDSA_521 to MINIMAL_TEST_CERTS to ensure coverage over all key types.

Problem:

This PR reduces the number of certificates used in integration tests, limiting them to only the minimal required set, except for test_happy_path.py, which retains all certs for comprehensive coverage. Certain tests has slightly increased because we added ECDSA_521 to MINIMAL_TEST_CERTS

Before Reduction	After Reduction	Change
8701 test_buffered_send.py	9781 test_buffered_send.py	🟢🔼 +1080
8840 test_happy_path.py	8840 test_happy_path.py	➖ No change
12308 test_signature_algorithms.py	2588 test_signature_algorithms.py	🔴🔽 -10720
4159 test_external_psk.py	1999 test_external_psk.py	🔴🔽 -2160
7664 test_session_resumption.py	1724 test_session_resumption.py	🔴🔽 -5940
1682 test_client_authentication.py	1682 test_client_authentication.py	➖ No change
6925 test_version_negotiation.py	1525 test_version_negotiation.py	🔴🔽 -5400
1220 test_renegotiate.py	1275 test_renegotiate.py	🟢🔼 +55
1220 test_npn.py	1275 test_npn.py	🟢🔼 +55
3964 test_early_data.py	1144 test_early_data.py	🔴🔽 -2820
3504 test_cross_compatibility.py	864 test_cross_compatibility.py	🔴🔽 -2640
576 test_ocsp.py	576 test_ocsp.py	➖ No change
1320 test_dynamic_record_sizes.py	300 test_dynamic_record_sizes.py	🔴🔽 -1020
253 test_record_padding.py	271 test_record_padding.py	🟢🔼 +18
457 test_hello_retry_requests.py	127 test_hello_retry_requests.py	🔴🔽 -330
88 test_sni_match.py	88 test_sni_match.py	➖ No change
175 test_sslyze.py	75 test_sslyze.py	🔴🔽 -100
72 test_fragmentation.py	72 test_fragmentation.py	➖ No change
28 test_renegotiate_apache.py	28 test_renegotiate_apache.py	➖ No change
15 test_pq_handshake.py	15 test_pq_handshake.py	➖ No change
8 test_serialization.py	8 test_serialization.py	➖ No change
7 test_key_update.py	7 test_key_update.py	➖ No change
1 test_well_known_endpoints.py	1 test_well_known_endpoints.py	➖ No change
1 test_sslv2_client_hello.py	1 test_sslv2_client_hello.py	➖ No change
1 63188/443728 tests collected	1 34266/290490 tests collected	🔴🔽 -28922 tests
(380540 deselected) in 21.82s	(256224 deselected) in 11.89s	🔴🔽 -124316 deselected

Testing

Verified that reducing the number of certificates did not impact coverage of other test parameters (buffer sizes, protocols, ciphers). The test compared the original and modified test outputs to ensure that all non-certificate parameters remained unchanged. Attached below is the test case.

📌 Testcase

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[dougch]

Neat, spot checked one of the aarch64 jobs, run time reduced from 35min to 19min.

[jmayclin]

Could you include the diff in the collected tests in the PR description? before/after. test_happy_path.py seems oddly low ...

[jmayclin]

Nit: it would be good to clarify the scope in the PR title. test(integv2): reduce parameter selection