openssl: add universal option