Missing functionality + Adding Nmap to our CI

[smittals2]

Issues:

CryptoAlg-2552

Description of changes:

This PR adds Nmap tip of main to our CI. It includes:

1. A patch to Nmap
2. Adding an include for <errno.h> to <err.h>, OpenSSL does this but we previously did not
3. Adding BIO_destroy_bio_pair (the functionality was already implemented, we are simply exposing that through a new func)
4. Creating a new alias for "DES" in the EVP_CIPHER API. The "default" mode used in OpenSSL 1.1.1 and 3.1 with DES is CBC (link).

Testing:

Locally built and ran nmap tests with AWS-LC and verified they pass. Conducted a dry run with the extra included file to ensure it doesn't break any consumers in live (refer to CryptoAlg-2552 for the dryrun link).

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and the ISC license.

[codecov-commenter]

Codecov Report

Attention: Patch coverage is 0% with 5 lines in your changes missing coverage. Please review.

Project coverage is 78.53%. Comparing base (c64ec41) to head (4fdbc2c).
Report is 10 commits behind head on main.

Files with missing lines	Patch %	Lines
crypto/bio/pair.c	0.00%	5 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1915      +/-   ##
==========================================
+ Coverage   78.50%   78.53%   +0.03%     
==========================================
  Files         585      585              
  Lines       99682    99808     +126     
  Branches    14262    14287      +25     
==========================================
+ Hits        78260    78389     +129     
+ Misses      20786    20781       -5     
- Partials      636      638       +2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[andrewhop]

What uses these aliases? Does adding DES here enable it to be used silently by default anywhere?

[smittals2]

1. Adding this mapping does not "leak" anything new. We already expose des-cbc through the kCiphers array. This change adds another alias pointing "DES" to this mapping (cbc is the default mode for DES in OpenSSL).
2. These aliases are checked in addition to the kCiphers array. This is due to differences in the string names applications try to fetch algorithms with. In general these string:EVP_CIPHER mappings are used by the EVP_get_cipherbyname function. This function is part of our public API, although deprecated, which means users can directly retrieve the EVP_des_cbc cipher object and then conduct operations with it. Internally I don't see any usages in our codebase other than testing.