libressl

• --enable-libtls-only only installs libtls for systems that use openssl
• Check --enable-extratests
• Provides /etc/ssl/cert.pem by default; no need for ca-certificates