Add server client certificate support for TLS v1.2 . This is more complex

than client side as we need to keep the handshake record cache frozen when
it contains all the records need to process the certificate verify message.
(backport from HEAD).