fix: h2 CI

[metcoder95]

This relates to...

Closes #4156

Rationale

Changes

• test: fix key-size pem errors
• chore: use @metcoder95/https-pem

Features

Bug Fixes

Breaking Changes and Deprecations

Status

• I have read and agreed to the Developer's Certificate of Origin
• Tested
• Benchmarked (optional)
• Documented
• Review ready
• In review
• Merge ready

[mcollina]

lgtm

[Uzlopak]

Oh, i also created a PR #4400

I actually prefer mine, because it removes a dependency and does not replace it.

[gurgunday]

Honestly I'd also prefer inlining but just my 50c

[metcoder95]

I don't have a strong opinion on this; the good reason I found to keep something like https-pem is removal of the manual work to do rotation of certificates every no and then, as well as to test several key sizes and other combinations to detect possible regressions.

But if we feel otherwise, happy to go with an inline version

[mcollina]

lgtm

The reason we didn't go for inline certs is to avoid the PRs needed to update them every X amount of time + all the false positives that security scanners would generate.