It's not an interesting situation. OpenSSL is a dysfunctional project, maintained by unreasonable, antisocial people, following exactly none of the practices th

It's not an interesting situation. OpenSSL is a dysfunctional project, maintained by unreasonable, antisocial people, following exactly none of the practices that professional software developers take for granted. Throwing money into that project solves none of its problems. On the other hand many of these problems are solved by just ignoring them and reimplementing their junk, which is what several companies have done.