OpenSSL: guard X509_check_host against LibreSSL