Improve check for openssl on macOS

- Only call `openssl version` once;

- Make the check work with future version of LibreSSL after 2.2.7. This
  assumes that Apple might keep updating LibreSSL shipping with macOS,
  but that they will never provide header files.