add openssl option to use SHA2