support --without-openssl at configure time

Disables and removes dependency on OpenSSL. Many features don't
work and the set of crypto options is greatly restricted. This
will only work on system with native arc4random or /dev/urandom.

Considered highly experimental for now.
diff --git a/kexdh.c b/kexdh.c
index e7cdadc..2c1dfb6 100644
--- a/kexdh.c
+++ b/kexdh.c
@@ -25,6 +25,8 @@
 
 #include "includes.h"
 
+#ifdef WITH_OPENSSL
+
 #include <sys/types.h>
 
 #include <signal.h>
@@ -85,3 +87,4 @@
 	*hash = digest;
 	*hashlen = ssh_digest_bytes(SSH_DIGEST_SHA1);
 }
+#endif /* WITH_OPENSSL */