[Bug 832833] openssl ssl_set_cert_masks() is broken, backport needed