Bump libressl version string to 2.1.

This makes 'openssl version' print a string that matches the -portable
release number.  Thanks to @blakkeim for pointing it out.

The version integer is left alone, with the idea of discouraging software from
relying on magic numbers for detecting features. Software configuration should
do explicit feature tests instead.

ok beck@, deraadt@