openssl: set Groups, add brainpool support

First, enable controlling Groups of openssl. Second, allow enabling brainpool in TLS through it.