avoid SHA-1 functions deprecated in OpenSSL 3+