Add ENABLE_* options for OpenSSL 3.0 legacy crypto provider

[ni4]

Description

OpenSSL 3.0 moved some of the digests/symmetric ciphers to the 'legacy' crypto provider, which is not loaded by default. We should be ready to disable those digests/symmetric ciphers via the build-time switches, like it is done with Twofish/Brainpool curves/whatever else.

See this for the details: https://wiki.openssl.org/index.php/OpenSSL_3.0#Provider_implemented_ciphers

[andrey-utkin]

From reading that wiki page, and the source code of legacy provider, only 4 legacy features are relevant to OpenPGP and RNP: BF (Blowfish), CAST, RIPEMD160 and IDEA. IDEA already has a build option, so I will add build options to for the others.

[ni4]

Fixed via #1883