https://bugs.openldap.org/show_bug.cgi?id=9303
--- Comment #4 from Howard Chu hyc@openldap.org --- (In reply to Howard Chu from comment #3)
Possibly we could just adopt BoringSSL or LibreSSL instead, which would allow us to reuse almost all of our existing OpenSSL support code. Needs some more investigation.
BoringSSL doesn't appear to be provided for system use on any Linux distros. It's packaged on debian/ubuntu strictly for building Android apps.
LibreSSL appears to only be used on *BSDs. So neither of these two is a candidate for a general replacement of OpenSSL.
WolfSSL is available on Ubuntu at least, haven't checked other distros.