don't duplicate OpenSSL structures

Use OpenSSL to parse DHParams/ECPKPARAMS even if it means slightly more
runtime overhead.