libssh: security+maintenance to fix CVE-2014-8132

Also switched to openssl instead of libgcrypt (wouldn't compile otherwise),
and fixed meta.license.