Follow-up from "Draft: refactor TLSDNS module to work with libuv/ssl directly"
The following discussion from !4584 (merged) should be addressed:
The "dot" system test is currently only using "tls ephemeral". I'm thinking we really should add a test with a non-ephemeral cert and key, but I'm not sure how best to do that. Can we generate some with extremely long lifetimes and put them in the source tree?