openssl: revert the no-ripemd change, openssh needs that cipher