Consider LibreSSL as default OpenSSL provider again
In addition to missing FIPS, I wonder if LibreSSL supports kTLS.  That could be another reason to stick to OpenSSL.The only ssl libs that I'm aware of that support kTLS are OpenSSL, and a hack I did to golang (modeled on https://blog.filippo.io/playing-with-kernel-tls-in-linux-4-1...).