openssl_1_1 mark as insecure/remove before 23.05 branchoff #210452
Description
OpenSSL 1.1.1 (we call it openssl_1_1) will reach end of life on 11 Sep 2023.
This means we should either mark it insecure or ideally completely remove it before the 23.11 release.
The default was already switched in #150093, so most thing should use openssl_3 now.
For applications that support the OpenSSL 3 API, but need old and broken cryptography, there's also openssl_legacy, which will be supported, because it's just openssl_3 but with the legacy crypto provider enabled.
This is a tracking issue to reference and coordinate this work.
cc @NickCao