Backport PR #28391 on branch 0.25.x
Just the SSL failure @jorisvandenbossche.

It's looking like fixed OpenSSL packages will be up later today, so I recommend not bothering with a pin and just ignoring the failures on 0.25.x for now. Sound good to you @jreback @jorisvandenbossche? Yes, agreed, therefore I also tagged the pin PR for 1.0, not 0.25.x