DNSSEC signing, compatibility with OpenSSL 0.9.8

Reported-by: Philip Paeps