remove use of internally-deprecated OPENSSL_malloc/free