Move to new OpenSSL 1.0.2 API.
Use the Database directly from HttpHandler::GetEntries.

And also CTUDPDNSServer::LeafHash, for completeness.
Make HttpHandler::GetEntries non-blocking.

This operation goes to disk with both our Database implementations, so do it
on the thread pool, rather than synchronously.