ensure openssl is at least 1.0.2h
ensure openssl is at least 1.0.2h

We get the latest version of openssl at build-time, but
this commit makes it obvious which is the minimum version.

CVE-2016-2107 Prevent padding oracle in AES-NI CBC MAC check
CVE-2016-2105 Fix EVP_EncodeUpdate overflow
CVE-2016-2106 Fix EVP_EncryptUpdate overflow
CVE-2016-2109 Prevent ASN.1 BIO excessive memory allocation
CVE-2016-2176 EBCDIC overread

jumanjihouse/puppet-on-coreos,jumanjiman/puppet-on-coreos