fix X509V3_EXT_METHODs for ocsp nonce extension

[samuel40791765]

Issues:

Resolves V1391929042

Description of changes:

This backports more of the changes done in 736a283 to reintroduce the "old-style" X509V3_EXT_METHODs.
Although we're reintroducing the methods we discourage using, I've added checks to ensure that these are only used with NID_id_pkix_OCSP_Nonce. The assertion in X509V3_EXT_add is kept so that we continue to only allow |ASN1_ITEM|-based extensions for consumers that add their own.

Call-outs:

I've abstracted out the freeing logic to x509v3_ext_free_with_method. This used to be all over the place.

Testing:

New test case added

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and the ISC license.

[codecov-commenter]

Codecov Report

Attention: Patch coverage is 73.46939% with 13 lines in your changes are missing coverage. Please review.

Project coverage is 77.92%. Comparing base (fc06ecb) to head (d875335).
Report is 2 commits behind head on main.

Files	Patch %	Lines
crypto/x509/v3_lib.c	72.72%	9 Missing ⚠️
crypto/x509/v3_conf.c	33.33%	2 Missing ⚠️
crypto/x509/v3_prn.c	50.00%	2 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1603      +/-   ##
==========================================
+ Coverage   77.90%   77.92%   +0.02%     
==========================================
  Files         561      561              
  Lines       94632    94669      +37     
  Branches    13604    13616      +12     
==========================================
+ Hits        73725    73773      +48     
+ Misses      20315    20303      -12     
- Partials      592      593       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.