Use OpenSSL 3.x _only_ and implement RFC 8636

- No more OpenSSL 1.x support
 - Remove 1DES and 3DES
 - Remove NETLOGON, NTLM (client and 'digest' service)

kdc/string2key.c

@@ -157,7 +157,7 @@ main(int argc, char **argv)
     if(argv[0])
 	password = argv[0];
     if(password == NULL){
-	if(UI_UTIL_read_pw_string(buf, sizeof(buf), "Password: ", 0))
+	if (_krb5_UI_UTIL_read_pw_string(buf, sizeof(buf), "Password: ", 0))
 	    return 1;
 	password = buf;
     }