openssl: add legacy provider