PRs included in this backort:

• Update openssl1.1.1b: Update openssl1.1.1b #26327, backported because openssl updates don't merge well, and always need backporting
• TLS1.3 support: TLS1.3 support #26209 (WIP), had to do some minor fixups to cherry-pick
• tls: revert default max to TLSv1.2: this is new, it reverts the semver-major change introduced in the previous commit
• tls: add debugging to native TLS code: tls: add debugging to native TLS code #26843, cherry-picked clean on top of TLS1.3 support
• doc: describe tls.DEFAULT_MIN_VERSION/_MAX_VERSION : doc: describe tls.DEFAULT_MIN_VERSION/_MAX_VERSION #26821, had to fix a minor conflict caused by tls: revert default max to TLSv1.2, which changed the default min/max from the values on master

• tls: support shared openssl 1.1.0: this is new, it adds back support for openssl 1.1.0
• tls: add --tls-min-v1.2 CLI switch: this is new, it adds a CLI switch to change the min protocol to v1.2

Checklist

• make -j4 test (UNIX), or vcbuild test (Windows) passes
• tests and/or benchmarks are included
• documentation is changed or added
• commit message follows commit guidelines