tools/Makefile: get openssl CFLAGS from pkg-config