A side note: The OpenSSL related kmod feature was implemented by Yauheni Kaliuta. Yauheni also posted a version based on GnuTLS (LGPL): https://patchwork.kernel.org/patch/10688685/
Having this available as a variant and using it instead would solve this problem.
