only query dnsseeds when really needed
openssl 1.0.1i