Add SSLv2 support behind a cfg flag

Many OpenSSL distributions have SSLv2 support compiled out, so it should
be opt-in.