@nytpu @wolf480pl yeah, I wouldn't fuck with OpenSSL. you can read the release notes from LibreSSL to see why.
is it feasible to use spark-nacl to write a libtls equivalent? fewer dependencies especially to C libs is more desirable but obviously more work.