OpenSSL 3.0 FIPS mode is now detected correctly
Upstream fixes on top of 36.0.1:
- Fix error check from EVP_PKEY_CTX_set_signature_md
- Block 3DES in FIPS mode
- Disable DSA tests in FIPS mode
- Enable SHA1 signatures in test suite
- Fix serialization of keyusage ext with no bits
Related: rhbz#2060787
