Makefile: NO_OPENSSL=1 should no longer imply BLK_SHA1=1