OpenSSL: fix non-OCSP build