openssl: disable digests by default, misc fixes