Build OpenSSL from ports and make nginx use it.
Enhance nginx default TLS configuration:

 - Prefer Perfect Forward Secrecy.
 - Enable HSTS for a year if https is enabled.
 - Enable SPDY.
 - Enable session cache (cap at 16MB).

Legacy browser (e.g. IE 6.0) will not be able to access the site because of
this change.