Merge branch 'maint-3.3' into maint-4.0

* maint-3.3:
  test_pkey_rsa.rb: Fix test_private_encoding_encrypted in OpenSSL 4.0 FIPS
  Add const qualifiers for OpenSSL 4.0 compatibility
  const correct ossl_bin2hex()
  Backport changes for opaque ASN1_STRING in OpenSSL 4
  ssl: fix test_tmp_dh and test_tmp_dh_callback with OpenSSL 4.0
  pkey/rsa: skip test_verify_empty_rsa with OpenSSL >= 3
  pkey: handle EVP_PKEY_KEYMGMT return by EVP_PKEY_id()
  pkey: use EVP_PKEY_new_raw_{private,public}_key_ex() if available
  ossl.h: include <openssl/provider.h> in ossl.h

Author: rhenium