[openssl] Static builds should maybe set no-module configure option

[madig]

---

Is your feature request related to a problem? Please describe.

OpenSSL 3.0 deprecated some old algorithms like RC2-40-CBC, which are still in use in some PKCS#12 certificates. Using them requires something like

OSSL_PROVIDER* dflt = OSSL_PROVIDER_load(nullptr, "default");
if (dflt == nullptr) {
    ERR_print_errors_fp(stderr);
    return;
}
OSSL_PROVIDER* legacy = OSSL_PROVIDER_load(nullptr, "legacy");
if (legacy == nullptr) {
    ERR_print_errors_fp(stderr);
    return;
}

at the start of your program; however, a static OpenSSL build (no-shared) will try to dynamically load e.g. legacy.so, which will not exist. To make the legacy provider available in static builds, OpenSSL needs to be built with no-shared no-module (see openssl/openssl#17679).

Proposed solution

OpenSSL (at least on Unix? Not sure about other platforms) should probably have https://github.com/microsoft/vcpkg/blob/master/ports/openssl/unix/CMakeLists.txt#L130 be set(SHARED no-shared no-module)

Describe alternatives you've considered

I don't know if there is a use-case for dynamically loading these modules for a static build?