sync to upstream and correct ssl.h.