Additional tests for NSS DH

Notably, there's a test to make sure that it round-trips with
OpenSSL, if OpenSSL is enabled.