We're behind a few releases of OpenSSL 1.1.1. We should probably bump the bundled version and at some point move to 3.x.