build: use host cflags/ldflags for openssl prereq check