FL-396: add masked openssl-1.0.1d with upstream patch