openssl: unbreak PKCS12 support