Comment 11 for bug 2004676

Alright, added an mp that maintains behavior for openssl engines here:
https://code.launchpad.net/~lvoytek/ubuntu/+source/openvpn/+git/openvpn/+merge/452307

As for the other two commits: I can confirm "fix client-pending-auth error msg to say ERROR instead of SUCCESS" is just a string change that doesn't modify the return value which stays as the value of (*man->persist.callback.client_pending_auth)(man->persist.callback.arg, cid, extra), and is not created dynamically from the string.

"Translate openssl 3 digest names to openssl 1.1 ones" won't cause issues for existing config files as their names are still accepted. If new openssl3 names are used now though they will be accepted as the correct equivalent value using a translation table.