Bump version of openssl to 1.0.1h

This addresses vuln exposed by https://www.openssl.org/news/secadv_20140606.txt

The patch file still applies cleanly.