openssl: add configuration options, disable ssl3