u+codalist-p4pg_at_chalmers.se writes:

 > Neither is OpenSSL the only source of decent cryptographic
 > routines [...].  I would instead remove the dependency on OpenSSL.

Changing the license to allow use of better (open source) crypto tools
is a real bargain, IMO.

The question is, are those other tools as good as OpenSSL?  That I'm
not competent to judge.