Update mbedtls from 3.4.1 to 3.5.0

[DL6ER]

What does this implement/fix?

This release of Mbed TLS provides new features, bug fixes and minor enhancements. This release includes fixes for security issues.

Most important of the long list of improved/new features is:

• It is now possible to generate certificates with SubjectAltNames. (added in Add a possibility to generate certificates with a Subject Alternative Name Mbed-TLS/mbedtls#7400)

This will allow us to define SAN for the automatically generated self-signed certificate.

Related issue or feature (if applicable): N/A

Pull request in docs with documentation (if applicable): N/A

---

By submitting this pull request, I confirm the following:

1. I have read and understood the contributors guide, as well as this entire template. I understand which branch to base my commits and Pull Requests against.
2. I have commented my proposed changes within the code.
3. I am willing to help maintain this change if there are issues with it later.
4. It is compatible with the EUPL 1.2 license
5. I have squashed any insignificant commits. (git rebase)

Checklist:

• The code change is tested and works locally.
• I based my code and PRs against the repositories developmental branch.
• I signed off all commits. Pi-hole enforces the DCO for all contributions
• I signed all my commits. Pi-hole requires signatures to verify authorship
• I have read the above and my PR is ready for review.

[yubiuser]

Happy to approve once this compiles successfully.

[DL6ER]

There is trouble ahead with at least architectures lacking AESNI support. Seems it is the new default to use it and they missed to add appropriate detection into their configure script (or it doesn't work).