Merge topic branch t/openssl-3 into master

Two patches. The first suppresses warnings when compiling against
openssl-3, the second switches the two hash functions over to the
EVP API. More work is needed but it does not hurt to merge this first
step now.

* refs/heads/t/openssl-3:
  openssl: Switch to evp API for sha1 and sha256.
  openssl: Deactivate openssl-3 warnings for now.

diff --combined NEWS.md
index 009982a3b85a3ad2421aab8ef4684b3dc30a8587,5a00175c3255702b03ec86e0af1938863f53ba4d..fff7a242bba99d3a322b47c0d101d36b93e8d8d5
--- 1/NEWS.md
--- 2/NEWS.md
+++ b/NEWS.md
@@@ -1,21 -1,6 +1,23 @@@
  NEWS
  ====
  
 +------------------------------------------
 +0.7.2 (to be announced) "optical friction"
 +------------------------------------------
 +
 +- A major cleanup of the audio file selector.
 +- The client no longer prints error messages from afs commands to
 +  stdout but to stderr.
 +- The sleep subcommand of para_mixer gained two options to control
 +  the startup mood and the time period before fade-out starts. A bunch
 +  of further improvements for this subcommand went in as well.
 +- Minor cleanup of the net subsystem.
++- The openssl specific code now employs the EVP API to compute hashes.
++  It should compile without warnings against openssl-3.
 +
 +Downloads:
 +[tarball](./releases/paraslash-git.tar.xz)
 +
  --------------------------------------
  0.7.1 (2022-10-03) "digital spindrift"
  --------------------------------------
@@@ -42,7 -27,6 +44,7 @@@ usual mix of bug fixes and minor improv
    requires support from the compiler, the oldest supported gcc version
    has been bumped to gcc-5.4 (released in 2015).
  
 +Downloads:
  [tarball](./releases/paraslash-0.7.1.tar.xz),
  [signature](./releases/paraslash-0.7.1.tar.xz.asc)
  
@@@ -235,23 -219,6 +237,23 @@@ Downloads
  [tarball](./releases/paraslash-0.6.1.tar.xz),
  [signature](./releases/paraslash-0.6.1.tar.xz.asc)
  
 +---------------------------------------
 +0.5.9 (2021-11-04) "reversed dimension"
 +---------------------------------------
 +This release contains a few important fixes which have accumulated in
 +the maint branch. The paraslash-0.5.x series has now reached its end
 +of life and will no longer be supported. All users should upgrade to
 +a more recent version at this point.
 +
 +- Fix an issue with the bash completion script.
 +- Initialize the random seed also when using libgrypt.
 +- Fix some compiler warnings in the resample filter
 +- Don't return spurious errors from the ff server command.
 +
 +Downloads:
 +[tarball](./releases/paraslash-0.5.9.tar.bz2),
 +[signature](./releases/paraslash-0.5.9.tar.bz2.asc)
 +
  ---------------------------------------
  0.5.8 (2017-09-23) "branching parabola"
  ---------------------------------------