kawa 2.0

Closes #34737.

Signed-off-by: Jack Nagel <jacknagel@gmail.com>
openssl: check conf file exists; tweak sandboxing/handling of the etc directory and files within.

Closes #34728.
openssl: additional testing

I've pushed a second commit here in the event the maintainers are :-1:
on the sandboxing issues discussed in #34735. Let me know either way,
and I'll either remove the second commit or squash the second into the
first to make it usable for all & acceptable to the maintainers.
openssl: update 1.0.1j_1 bottle.