[44.0.x] backports for libressl 4.1.0 support release (#12848)

* FIPS fixes (#12839)

* attempt to fix wycheproof in CI on centos stream9

skip RSA PSS with SHA224

* Update test_rsa.py

* Update backend.py

* fix

* make OpenSSL 3.5 FIPS work

This replaces the rsa_pss_cert.pem with a new one that uses a salt
length matching the digest length (previously it was max length)

* simplify

* comment

* fix

* update with new wycheproof

---------

Co-authored-by: Alex Gaynor <[email protected]>

* chore(deps): bump openssl-sys from 0.9.107 to 0.9.108 (#12832)

Bumps [openssl-sys](https://github.com/sfackler/rust-openssl) from 0.9.107 to 0.9.108.
- [Release notes](https://github.com/sfackler/rust-openssl/releases)
- [Commits](https://github.com/sfackler/rust-openssl/compare/openssl-sys-v0.9.107...openssl-sys-v0.9.108)

---
updated-dependencies:
- dependency-name: openssl-sys
  dependency-version: 0.9.108
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* test on libressl 4.1.0 (#12845)

* 44.0.3 release

* Make wycheproof x25519 and x448 tests more flexible (#12676)

* Update test_x448.py

* Update test_x25519.py

* Update test_x25519.py

* Update test_x448.py

* fix mitmproxy downstream tests (#12776)

* clippy nightly fixes

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: Paul Kehrer <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
57 files changed