add --enable-dh, build, checks w/o asn