Update openssl to 1.0.1h

OpenSSL 1.0.1h fixes several vulnerabilities, including some
client-side.
See https://www.openssl.org/news/secadv_20140605.txt