add --enable-asn, build, and checks for rsa / psk w/o asn