Fix warnings from BoringSSL on Rust 1.70

Setting ossl110 in the BoringSSL build (see #1944) causes rust-openssl
to expect OCB support. However, OpenSSL already has a feature guard for
OCB, which BoringSSL sets. rust-openssl just isn't honoring it.

This fixes building against an OpenSSL built with ./config no-ocb

The RSA and DSA changes will be needed to avoid build breakage soon. The
others are mostly tidying up. There's another place around BIO that we'd
ideally also switch over, but that depends on resolving the
__fixed_rust mess first.

This addresses a symptom of #1944, but not the root cause.

Honor OPENSSL_NO_OCB if OpenSSL was built this way

Fix some deprecated patterns when using BoringSSL

add get_asn1_flag to EcGroupRef

Fixed type mutability on asn1_flag

allow affine_coordinates on boring and libre

via Deriver::set_peer_ex

Co-authored-by: Steven Fackler <sfackler@gmail.com>

add support for EVP_PKEY_derive_set_peer_ex in OpenSSL 3

In OpenSSL, these are macros, so they didn't get imported by bindgen,
but they're proper functions in BoringSSL and we'd prefer
callers use those for safety. For OpenSSL, just add the corresponding
functions in openssl-sys, matching how rust-openssl handles
EVP_PKEY_CTX_ctrl.

Using the type-safe wrappers flags that rust-openssl was trying to
convert DH to EVP_PKEY, but BoringSSL doesn't actually support this. (DH
is a legacy primitive, so we haven't routed it to EVP_PKEY right now.)

Use type-safe wrappers instead of EVP_PKEY_assign

add Nid::SM2 and pkey Id::SM2

Fix handling of empty host strings

Remove old codes that belows supported Rust version.

Release openssl v0.10.55 and openssl-sys v0.9.89