The patch for include/ssl_applink.c has two hunks inside defined(SYS_WINNT). The second file concerns the winnt port.
The packages with and without this diff differ only because the built binaries have the build time and date embedded, so I don't think this needs a bump. Index: patches/patch-include_ssl_applink_c =================================================================== RCS file: patches/patch-include_ssl_applink_c diff -N patches/patch-include_ssl_applink_c --- patches/patch-include_ssl_applink_c 27 Mar 2017 11:33:40 -0000 1.1 +++ /dev/null 1 Jan 1970 00:00:00 -0000 @@ -1,21 +0,0 @@ -$OpenBSD: patch-include_ssl_applink_c,v 1.1 2017/03/27 11:33:40 bluhm Exp $ ---- include/ssl_applink.c.orig Thu Mar 23 21:54:28 2017 -+++ include/ssl_applink.c Thu Mar 23 21:55:47 2017 -@@ -14,7 +14,7 @@ - # include "msvc_ssl_autolib.h" - # endif - # endif --# if OPENSSL_VERSION_NUMBER < 0x10100000L -+# if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) - # include <openssl/applink.c> - # endif - # ifdef _MSC_VER -@@ -41,7 +41,7 @@ void ssl_applink(void); - void - ssl_applink(void) - { --#if OPENSSL_VERSION_NUMBER >= 0x10100000L -+#if OPENSSL_VERSION_NUMBER >= 0x10100000L && ! defined(LIBRESSL_VERSION_NUMBER) - # ifdef WRAP_DBG_MALLOC - CRYPTO_set_mem_functions(wrap_dbg_malloc, wrap_dbg_realloc, wrap_dbg_free_ex); - # else Index: patches/patch-ports_winnt_include_msvc_ssl_autolib_h =================================================================== RCS file: patches/patch-ports_winnt_include_msvc_ssl_autolib_h diff -N patches/patch-ports_winnt_include_msvc_ssl_autolib_h --- patches/patch-ports_winnt_include_msvc_ssl_autolib_h 27 Mar 2017 11:33:40 -0000 1.1 +++ /dev/null 1 Jan 1970 00:00:00 -0000 @@ -1,12 +0,0 @@ -$OpenBSD: patch-ports_winnt_include_msvc_ssl_autolib_h,v 1.1 2017/03/27 11:33:40 bluhm Exp $ ---- ports/winnt/include/msvc_ssl_autolib.h.orig Thu Mar 23 22:03:03 2017 -+++ ports/winnt/include/msvc_ssl_autolib.h Thu Mar 23 22:17:23 2017 -@@ -85,7 +85,7 @@ - * request in the object file, depending on the SSL version and the - * build variant. - */ --# if OPENSSL_VERSION_NUMBER >= 0x10100000L -+# if OPENSSL_VERSION_NUMBER >= 0x10100000L && ! defined(LIBRESSL_VERSION_NUMBER) - # pragma comment(lib, "libcrypto" LTAG_SIZE LTAG_RTLIB LTAG_DEBUG ".lib") - # else - # pragma comment(lib, "libeay32" LTAG_RTLIB LTAG_DEBUG ".lib")