Lots of tests related to pyopenssl fail, at least some of them are clearly due
to new deprecation warnings:

FAILED
test/contrib/test_pyopenssl.py::TestHTTPS_IPV4SAN::test_can_validate_ip_san -
DeprecationWarning: X509.get_subject is deprecated. You should use
cryptography's X.509 APIs instead.

or new errors that were previously deprecation warnings:

FAILED
test/with_dummyserver/test_proxy_poolmanager.py::TestHTTPSProxyVerification::test_https_proxy_assert_fingerprint_md5_non_matching
- ValueError: Context has already been used to create a Connection, it cannot
be mutated again

Not sure about others:

FAILED
test/with_dummyserver/test_proxy_poolmanager.py::TestHTTPSProxyVerification::test_https_proxy_no_san[http]
- assert ('no appropriate subjectAltName fields were found' in '("bad
handshake: Error([(\'SSL routines\', \'\', \'certificate verify failed\')])",)'
or "Hostname mismatch, certificate is not valid for 'localhost'" in '("bad
handshake: Error([(\'SSL routines\', \'\', \'certificate verify failed\')])",)'
or 'Empty Subject Alternative Name extension' in '("bad handshake:
Error([(\'SSL routines\', \'\', \'certificate verify failed\')])",)')

FAILED
test/with_dummyserver/test_proxy_poolmanager.py::TestHTTPSProxyVerification::test_https_proxy_assert_fingerprint_md5
- urllib3.exceptions.ProxySchemeUnsupported: TLS in TLS requires
SSLContext.wrap_bio() which isn't available on non-native SSLContext