xen: switch to libressl and fix build with gcc-4.9.x.