crypto/openssl: fix AES-GCM capability