Apply Ruby patch to enable FIPS with OpenSSL 3

[mhashizume]

Prior to this commit, attempting to enable fips_mode in Ruby 3.2.3's OpenSSL gem would cause the error "This version of OpenSSL does not support FIPS mode (OpenSSL::OpenSSLError)". This was due to OpenSSL removing the FIPS_mode() function in OpenSSL 3, which Ruby previously relied on to detect if FIPS was enabled.

Upstream has fixed this incompatibility with OpenSSL 3 in Ruby 3.3. The contributor has indicated that the fix should be backported to Rubies 3.0-3.2 in the future.

This commit applies Ruby's fix as a patch.

See also:

• ruby/ruby@678d41b
• https://bugs.ruby-lang.org/issues/20000

[mhashizume]

The original Ruby patch modified two files, but I removed the patched test file as it caused compilation failures that I did not fully understand (and I assumed that we don't need to ship Ruby's tests).

[mhashizume]

To be clear: this patch enables us to turn on OpenSSL.fips_mode, but it is not turned on by default:

[root@unnamed-summary ~]# cat /etc/redhat-release
Red Hat Enterprise Linux release 9.3 (Plow)
[root@unnamed-summary ~]# fips-mode-setup --check
FIPS mode is enabled.
[root@unnamed-summary ~]# /opt/puppetlabs/puppet/bin/ruby -v
ruby 3.2.3 (2024-01-18 revision 52bb2ac0a6) [x86_64-linux]
[root@unnamed-summary ~]# /opt/puppetlabs/puppet/bin/irb
irb(main):001:0> require 'openssl'
=> true
irb(main):002:0> OpenSSL.fips_mode
=> false
irb(main):003:0> OpenSSL.fips_mode = true
=> true