Draft: main/nginx: use openssl 1.1

Part of #13001 (closed)

nginx needs upgrade to 1.21.2 for compatibility but this version is mainline - 1.20 is stable atm

OTOH commits could be backported (guest starting from 37be19a3c0eed1897f9a747de300af4f10260af6 https://trac.nginx.org/nginx/log/nginx/