Consider LibreSSL as default OpenSSL provider again
In addition to missing FIPS, I wonder if LibreSSL supports kTLS.  That could be another reason to stick to OpenSSL.<p>The only ssl libs that I'm aware of that support kTLS are OpenSSL, and a hack I did to golang (modeled on <a href="https://blog.filippo.io/playing-with-kernel-tls-in-linux-4-13-and-go/" rel="nofollow">https://blog.filippo.io/playing-with-kernel-tls-in-linux-4-1...</a>).