add openssl patches from Fedora, enable TLS mode
    
    Since edk2 does not compile the apps/ subdirectory, the only other patches
    that might apply are openssl-1.1.0-no-md5-verify.patch (but edk2 does not have
    secure_getenv) and of course FIPS 140-2 mode.