openssl: add back the CAST cipher by default