Convert openssl code not to assume the deprecated form of BN_zero().