OpenSSL: Update to version 1.1.1k

This has some important fixes:

* Fixed a problem with verifying a certificate chain when using the
  X509_V_FLAG_X509_STRICT flag. This flag enables additional security
  checks of the certificates present in a certificate chain. It is not
  set by default. ([CVE-2021-3450])

* Fixed an issue where an OpenSSL TLS server may crash if sent a
  maliciously crafted renegotiation ClientHello message from a client.
  If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms
  extension (where it was present in the initial ClientHello), but
  includes a signature_algorithms_cert extension then a NULL pointer
  dereference will result, leading to a crash and a denial of service
  attack. ([CVE-2021-3449])

AFAICT we are not affected by CVE-2021-3450, but the Fusion/Shuffle
server is affected by CVE-2021-3449.