Fix tls-test for OpenSSL 1.1.1.

These errors apparently don't show up until the first read with 1.1.1, and may have different messages.

Apparently this landed on my Debian machine *today* and then all of the sudden the test was failing. I was so confused.

c++/src/kj/compat/tls-test.c++

@@ -518,7 +518,11 @@ KJ_TEST("TLS client certificate verification") {
 
     auto pipe = test.io.provider->newTwoWayPipe();
 
-    auto clientPromise = test.tlsClient.wrapClient(kj::mv(pipe.ends[0]), "example.com");
+    auto clientPromise = test.tlsClient.wrapClient(kj::mv(pipe.ends[0]), "example.com")
+        .then([](kj::Own<kj::AsyncIoStream> stream) {
+      auto promise = stream->readAllBytes();
+      return promise.attach(kj::mv(stream));
+    });
     auto serverPromise = test.tlsServer.wrapServer(kj::mv(pipe.ends[1]));
 
     KJ_EXPECT_THROW_MESSAGE(
@@ -526,7 +530,7 @@ KJ_TEST("TLS client certificate verification") {
                     "PEER_DID_NOT_RETURN_A_CERTIFICATE"),
         serverPromise.wait(test.io.waitScope));
     KJ_EXPECT_THROW_MESSAGE(
-        SSL_MESSAGE("alert handshake failure",
+        SSL_MESSAGE("alert",  // "alert handshake failure" or "alert certificate required"
                     "SSLV3_ALERT_HANDSHAKE_FAILURE"),
         clientPromise.wait(test.io.waitScope));
   }
@@ -540,7 +544,11 @@ KJ_TEST("TLS client certificate verification") {
 
     auto pipe = test.io.provider->newTwoWayPipe();
 
-    auto clientPromise = test.tlsClient.wrapClient(kj::mv(pipe.ends[0]), "example.com");
+    auto clientPromise = test.tlsClient.wrapClient(kj::mv(pipe.ends[0]), "example.com")
+        .then([](kj::Own<kj::AsyncIoStream> stream) {
+      auto promise = stream->readAllBytes();
+      return promise.attach(kj::mv(stream));
+    });
     auto serverPromise = test.tlsServer.wrapServer(kj::mv(pipe.ends[1]));
 
     KJ_EXPECT_THROW_MESSAGE(