[new] [old] # remove when no longer building with OpenSSL 1.0