add openssl option to use SHA2

SHA1 is [dangerously weak](http://arstechnica.com/security/2012/10/sha1-crypto-algorithm-could-fall-by-2018/) and in fact Google Chrome will soon start warning about it. Using this option should make things more future-proof.