Rebase to python-cryptography 36.0.1 + upstream fixes

Christian Heimesrequested to merge
tiran/centos_rpms_python-cryptography:v36.0.1 into c9s

OpenSSL 3.0 FIPS mode is now detected correctly

Upstream fixes on top of 36.0.1:

  • Fix error check from EVP_PKEY_CTX_set_signature_md
  • Block 3DES in FIPS mode
  • Disable DSA tests in FIPS mode
  • Enable SHA1 signatures in test suite
  • Fix serialization of keyusage ext with no bits

Related: rhbz#2060787

Edited by Christian Heimes

Merge request reports