openssl: optimize build options, disable old SSL versions