openssl: poodle fixes