openssl_3, but with a openssl.cnf that enables legacy ciphers this way we can migrate away from openssl_1_1, while not breaking applications relying on deprecated stuff