Use openssl 1.1 by default

[globin]

Tracking hydra jobset: https://hydra.nixos.org/jobset/nixpkgs/openssl-1.1

[mention-bot]

@globin, thanks for your PR! By analyzing the history of the files in this pull request, we identified @edolstra, @aneeshusa and @wkennington to be potential reviewers.

[vcunat]

I guess this isn't yet ready to be staged; it seems many packages can't handle the new version yet.

[globin]

Yes, still wip

[vcunat]

Perhaps the package updates are worth merging regardless of default openssl version?

[globin]

Was planning to finish this in the next few days anyway so not sure if it's worth it.

[globin]

This is good enough to be merged to master, some minor failures in leaf packages still exist, but they can either be fixed in ZHF or marked as broken if nobody cares

[globin]

I'll merge this to master and that back to staging/staging-next at around midday GMT if no one beats me to it.

[vcunat]

It's in staging-next as well, since 2e6bf42.

[lheckemann]

#67375 for staging (WIP)

[lopsided98]

This causes a segfault in rtmpsink in gst-plugins-bad, because rtmpdump depends on 1.0 while gst-plugins-bad depends on 1.1. See #67842 for a fix.