thrift: depend on newer openssl.