Make FIPS module configuration more crypto-policies friendly

Add a workaround for lack of EMS in FIPS mode

Remove unsupported curves from nist_curves.

Remove the listing of brainpool curves in FIPS mode.

Fix possible DoS translating ASN.1 object identifiers
2023-2650
Release the DRBG in global default libctx early

Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode

Use OAEP padding and aes-128-cbc by default in cms command in FIPS mode

Enforce using EMS in FIPS mode - better alerts

Upload new upstream sources without manually hobbling them.
Remove the hobbling script as it is redundant. It is now allowed to ship
ec2m' Configure option. The additional forbidden
160, P-192, wap-tls curves are manually removed by updating
Remove-EC-curves.patch.
Enable Brainpool curves.
Apply the changes to ec_curve.c and ectest.c as a new patch
Add-changes-to-ectest-and-eccurve.patch instead of replacing them.
Modify 0011-Remove-EC-curves.patch to allow Brainpool curves.
Modify 0011-Remove-EC-curves.patch to allow code under macro OPENSSL_NO_EC2M.

Backport implicit rejection for RSA PKCS#1 v1.5 encryption

Input buffer over-read in AES-XTS implementation on 64 bit ARM

Enforce using EMS in FIPS mode
Fix excessive resource usage in verifying X509 policy constraints
Fix invalid certificate policies in leaf certificates check
Certificate policy check not enabled
OpenSSL rsa_verify_recover key length checks in FIPS mode

Change explicit FIPS indicator for RSA decryption to unapproved

Add missing reference to patchfile to add explicit FIPS indicator to RSA

Add explicit FIPS indicator to RSA encryption and RSASVE

Fix explicit FIPS indicator for X9.42 KDF when used with output lengths < 14 bytes