Update openssl to 1.0.0k (security fix)

This addresses two security advisories; see http://www.openssl.org/news/secadv_20130205.txt