As BIND 9.20 does not support RHEL/CentOS 7 which just reach end-of-life, we can safely bump the OpenSSL requirements to version 1.1.1, which in turn will allow us to simplify our OpenSSL integration.