HCD-63: Upgrade Netty to 4.1.108 and BoringSSL to 2.0.66

[szymon-miezal]

The primary motivation for this change is a bug that manifests in loading
the cipher list for inter-node connections, which is slightly wider than the
configured list. This bug appears to be a consequence of how OpenSSL handles
cipher loading. Changing it doesn't seem feasible.

Netty introduced changes to mitigate this misbehavior:

• OpenSSL implementation ignores cipher specification for TLSv1.3 netty/netty#13810
• PR #13381 is incompatible with RHEL8 openjdk with FIPS enabled netty/netty#13840

To take advantage of these fixes, we need to upgrade Netty to at least
version 4.1.108. Upgrading Netty also necessitates bumping BoringSSL.

I have found some old CC tests in fallout that I decided to reuse to ensure the performance stays unchanged:

• http://fallout.aws.dsinternal.org/tests/ui/[email protected]/cc-write-throughput
• http://fallout.aws.dsinternal.org/tests/ui/[email protected]/cc-stargazer-dse-db-lwt-fixed-1000-partitions
• http://fallout.aws.dsinternal.org/tests/ui/[email protected]/cc-stargazer-dse-db-write-throughput-batch-100
• http://fallout.aws.dsinternal.org/tests/ui/[email protected]/cc-sai-single-node-wide-row
• http://fallout.aws.dsinternal.org/tests/ui/[email protected]/cc-stargazer-dsedb-density-1TB

I have used the fallout perf tool to compare the results with main and they seem pretty comparable to me. Example chart:

I am unsure whether there are other tests that exercise CC which could be reused.

[github-actions]

Checklist before you submit for review

• Make sure there is a PR in the CNDB project updating the Converged Cassandra version
• Use NoSpamLogger for log lines that may appear frequently in the logs
• Verify test results on Butler
• Test coverage for new/modified code is > 80%
• Proper code formatting
• Proper title for each commit staring with the project-issue number, like CNDB-1234
• Each commit has a meaningful description
• Each commit is not very long and contains related changes
• Renames, moves and reformatting are in distinct commits

[sonarqubecloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[cassci-bot]

❌ Build ds-cassandra-pr-gate/PR-1544 rejected by Butler

---

1 new test failure(s) in 4 builds
See build details here

---

Found 1 new test failures

Test	Explanation	Branch history	Upstream history
o.a.c.u.b.BinLogTest.testTruncationReleasesLogS...	regression	🔴🔴🔴🔴	🔵🔵🔵🔵🔵🔵🔵

---

Found 14 known test failures