OpenSSL: fix non-DANE build