[tests] use gnutls certtool to create test ca

also supports generating ecc (ecdsa) keys and selecting a hash

Change-Id: Iafa6557a4f0a97885a3300861b842289b73ea1de