Wrap package declaration with if defined

We already had an openssl package defined, and it was pinned to a specific version, so I needed to update this.  Per https://projects.puppetlabs.com/issues/18490 this is an antipattern, but the only workaround I'm aware of.