add SSL_CONF functions and documentation (backport from HEAD)