OpenSSL 3.2 compatibility

[danigm]

Fix #3355

[bdarnell]

My initial reaction was that the change from SSL_ERR_SSL to SSL_ERR_SYSCALL seems fishy, but it looks like OpenSSL is known to return SSL_ERR_SYSCALL in some (unspecified) cases for failed cert verification since at least version 3.1 (python/cpython#107077). Quietly logging SSL_ERR_SYSCALL here (whether it's a cert error or not) seems reasonable since that's what we do with socket.error (which is how most of our actual syscall errors would show up here).