openssl: 1.1.1i -> 1.1.1j

[mweinelt]

Motivation for this change

https://www.openssl.org/news/secadv/20210216.txt

Fixes: CVE-2021-23839, CVE-2021-23840, CVE-2021-23841

Things done

• Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
• Built on platform(s)
  • NixOS
  • macOS
  • other Linux distributions
• Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
• Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
• Tested execution of all binary files (usually in ./result/bin/)
• Determined the impact on package closure size (by running nix path-info -S before and after)
• Ensured that relevant documentation is up to date
• Fits CONTRIBUTING.md.

[SuperSandro2000]

This is a semi-automatic executed nixpkgs-review with nixpkgs-review-checks extension. It is checked by a human on a best effort basis and does not build all packages (e.g. lumo, tensorflow or pytorch).
If you have any questions or problems please reach out to SuperSandro2000 on IRC.

Result of nixpkgs-review pr 113528 run on x86_64-linux 1

1 package failed to build and are new build failure:

• home-assistant: log https://termbin.com/w43g

2 packages built:

• curlFull
• openssl

The following issues got detected with the above build packages.
Please fix at least the ones listed with your changed packages:

openssl:

Please add a comment on the line above, explaining the purpose of this patch.
Near pkgs/development/libraries/openssl/default.nix:153:7:

    |
153 |       ./1.0.2/nix-ssl-cert-file.patch
    |       ^

See: https://github.com/jtojnar/nixpkgs-hammering/blob/master/explanations/missing-patch-comment.md
Please add a comment on the line above, explaining the purpose of this patch.
Near pkgs/development/libraries/openssl/default.nix:155:7:

    |
155 |       (if stdenv.hostPlatform.isDarwin
    |       ^

See: https://github.com/jtojnar/nixpkgs-hammering/blob/master/explanations/missing-patch-comment.md
Please add a comment on the line above, explaining the purpose of this patch.
Near pkgs/development/libraries/openssl/default.nix:166:7:

    |
166 |       ./1.1/nix-ssl-cert-file.patch
    |       ^

See: https://github.com/jtojnar/nixpkgs-hammering/blob/master/explanations/missing-patch-comment.md
Please add a comment on the line above, explaining the purpose of this patch.
Near pkgs/development/libraries/openssl/default.nix:168:7:

    |
168 |       (if stdenv.hostPlatform.isDarwin
    |       ^

See: https://github.com/jtojnar/nixpkgs-hammering/blob/master/explanations/missing-patch-comment.md

[SuperSandro2000]

Building curl, openssl and most parts through home-assistant worked so compile wise this should be good to merge.

[stigtsp]

LGTM

[stigtsp]

@mweinelt should this go in staging-next?

[mweinelt]

@stigtsp staging-next has been merged earlier today, so there is no difference between the two right now.

[erictapen]

Was backported in c40154f.