Add the OpenSSL changes to the CHANGELOG It seems these were forgotten when initially splitting this up.