r428809 was, of course, not the right way to fix libssl linkage. marino
had the right solution, which is to use the appropriate OPTIONS helper,
which puts -L${OPENSSLLIB} in early enough that linkage works correctly.