https://bugs.openldap.org/show_bug.cgi?id=9303
--- Comment #3 from Howard Chu hyc@openldap.org --- Possibly we could just adopt BoringSSL or LibreSSL instead, which would allow us to reuse almost all of our existing OpenSSL support code. Needs some more investigation.