[openssl] use new code, comment old code
[openssl] fix backwards spec