Try to upgrade OpenSSL to 1.1.1k with an overlay

not yet built locally because slow networks and computers and such
let's see what CI does with it