Most (all?) native Windows applications shouldn't use OpenSSL. They should use the operating system-shipped APIs, along with the OS-shipped certificate stores.

Most (all?) native Windows applications shouldn't use OpenSSL. They should use the operating system-shipped APIs, along with the OS-shipped certificate stores. That means SChannel and CryptoAPIs in native code.