Unbreak FreeBSD Update mirroring code for OpenSSL 1.1

The default key derivation algorithm for "openssl enc" changed. Force
it back to the pre-1.1 default to regain backwards compatibility; we
use strong keys so this is safe.