tls: fix handling of asterisk in SNI context

Wildcard server names should not match subdomains.

Quote from RFC2818:

   ...Names may contain the wildcard
   character * which is considered to match any single domain name
   component or component fragment. E.g., *.a.com matches foo.a.com but
   not bar.foo.a.com. f*.com matches foo.com but not bar.com.

fix #6610
openssl: add assembly for aes and gcm
benchmark: fixate `ciphers` in tls benchmarks

Benchmark should always use the same cipher in order to be truthful.
tls_wrap: use writev when possible

Try writing multiple chunks from NodeBIO if possible.
crypto: fix moving read head

Fix various possible stalls of read head (i.e. try moving it after every
write head update).

NOTE: This is actually backported from `bud`.