Actually, we may avoid the complexity of managing HMAC_CTX by
using "convenience" function HMAC() instead of CTX-based family.
In this form, the program compiles against openssl 1.1.x (but
the configure option "--disable-openssl" is kept in case someone
dislikes openssl).