without libidn, decrypting password protected PDFs does not fully work.

This is a fixup of f6281e7a.

This fixes 3c514224

Since nginx 1.25.1 ssl directive has been dropped, so fix the configuration
template to work with 1.25.2.

Update nginx-push-stream to follow nginx API changes.

Will support zlib 1.3+

Extend PATH to make xzcat available.

Extend PATH to make xzcat available.

Enforce python3 usage, as the newer version requires python3.

Empty values are considered not provided, so provide a template which
produces a file with a lone comment.

Instead of using openssl-1.0 and overriding the new versions to use
openssl, use openssl by default and override in the old versions to use
openssl-1.0

This reverts commit 852389ac.