revert rustls default; add optional vendored openssl

Cargo.toml

@@ -46,6 +46,8 @@ suppaftp = { version = "^5.1.0", optional = true }
 
 thiserror = "1.0"
 
+openssl = { version = "0.10", features = ["vendored"], optional = true }
+
 [features]
 default = ["lib"]
 all = ["lib", "cli", "s3"]
@@ -66,7 +68,7 @@ lz = ["lz4"]
 xz = ["xz2"]
 
 remote=["reqwest", "suppaftp"]
-cli = ["clap", "tracing", "s3", "no-cache", "rustls"]
+cli = ["clap", "tracing", "s3", "no-cache"]
 json = ["serde", "serde_json"]
 
 # s3 support, off by default
@@ -75,6 +77,9 @@ s3= ["rust-s3", "native-tls", "dotenvy"]
 # no-cache
 no-cache = []
 
+# vendored openssl
+vendored-openssl = ["openssl"]
+
 [dev-dependencies]
 serde = {version="1.0", features=["derive"]}
 tracing = "0.1"