openssl: bump revision
openssl: update 1.0.1j_1 bottle.

Closes #34728.
libressl: improve pem handling

Doing a few things here:

* Brings LibreSSL into line with how we handle OpenSSL. See #34735 for
the OpenSSL equal, and #34728 for the original issue that drove all
this.
* Makes LibreSSL functionality non-dependent on Brewed-OpenSSL being
available. This steals the bootstrapping method from OpenSSL and
replicates it for the same function here.
* Changes some of the handling of HEAD to reflect new upstream
developments.
libressl: improved pem handling

If maintainers don’t love the sandbox changes, this would be the
alternative PR I’d create.

Changes:

* Makes LibreSSL non-dependent on Brewed-OpenSSL being available for CA
creation and thus actual useful functionality. This steals the
bootstrapping method from OpenSSL and replicates it for the same
function here.
* Changes some of the handling of HEAD to reflect new upstream
developments.
* Revision to actually make LibreSSL functional, since without a
functioning pem it isn’t a lot of use in real use-cases.
libressl: update 2.1.1_1 bottle.