diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6d3f31af1a3..d5c7d2a41c1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -140,7 +140,9 @@ jobs:
         uses: johnwason/vcpkg-action@v6
         with:
           pkgs: >-
+            openssl
             pcre
+            pkgconf
             sqlite3
           triplet: x64-mingw-dynamic-release
           extra-args: --overlay-triplets=${{ github.workspace }}/tools/vcpkg/triplets --host-triplet=x64-mingw-dynamic-release
@@ -243,12 +245,41 @@ jobs:
       - name: Add DLLs to PATH (Windows)
         if: runner.os == 'Windows'
         run: |
-          $binPath = Join-Path $PWD "vcpkg" "installed" "x64-mingw-dynamic-release" "bin"
+          $prefix = Join-Path $PWD "vcpkg" "installed" "x64-mingw-dynamic-release"
+
+          $binPath = Join-Path $prefix "bin"
           $binPath | Out-File -Append $env:GITHUB_PATH
+          $pkgconfPath = Join-Path $prefix "tools" "pkgconf"
+          $pkgconfPath | Out-File -Append $env:GITHUB_PATH
+
+          $pcPath = (Join-Path $prefix "lib" "pkgconfig"), (Join-Path $prefix "share" "pkgconfig"), $env:PKG_CONFIG_PATH
+          "PKG_CONFIG_PATH=$($pcPath -join ";")" | Out-File -Append $env:GITHUB_ENV
         shell: pwsh
 
       - name: Run tester
-        run: ./koch.py test --batch:'${{ matrix.batch }}_${{ matrix.total_batch }}' --tryFailing all
+        run: |
+          extraArgs=()
+
+          pc=
+          if command -v pkgconf 2>&1 >/dev/null; then
+            pc=pkgconf
+          elif command -v pkg-config 2>&1 >/dev/null; then
+            pc=pkg-config
+          fi
+
+          if [[ -n $pc ]]; then
+            extraArgs+=(
+              "-d:nimLibcryptoLinkFlags:$("$pc" --libs libcrypto)"
+              "-d:nimLibsslLinkFlags:$("$pc" --libs libssl)"
+            )
+
+            sslVer=$("$pc" --modversion libssl)
+            if [[ $sslVer == 1.1.1* ]]; then
+              extraArgs+=("-d:nimOpenssl111")
+            fi
+          fi
+
+          ./koch.py test --batch:'${{ matrix.batch }}_${{ matrix.total_batch }}' --tryFailing all "${extraArgs[@]}"
 
       - name: Print all test errors
         if: failure()
diff --git a/lib/pure/net.nim b/lib/pure/net.nim
index c33c7bf4631..e1e81f3c981 100644
--- a/lib/pure/net.nim
+++ b/lib/pure/net.nim
@@ -51,7 +51,7 @@ runnableExamples("-r:off"):
 
 ## For SSL, use the following example:
 
-runnableExamples("-r:off -d:ssl"):
+runnableExamples("-r:off --compileOnly -d:ssl"):
   let socket = newSocket()
   let ctx = newContext()
   wrapSocket(ctx, socket)
@@ -102,7 +102,7 @@ when useWinVersion:
   from std/winlean import WSAESHUTDOWN
 
 when defineSsl:
-  import std/openssl
+  import std/openssl/[ssl, safestack, err, x509, x509v3]
   when not defined(nimDisableCertificateValidation):
     from std/ssl_certs import scanSSLCertificates
 
@@ -121,7 +121,7 @@ when defineSsl:
       protSSLv2, protSSLv3, protTLSv1, protSSLv23
 
     SslContext* = ref object
-      context*: SslCtx
+      context*: ptr SSL_CTX
       referencedData: HashSet[int]
       extraInternal: SslContextExtraInternal
 
@@ -156,7 +156,7 @@ type
     bufLen: int            # current length of buffer
     when defineSsl:
       isSsl: bool
-      sslHandle: SslPtr
+      sslHandle: ptr SSL
       sslContext: SslContext
       sslNoHandshake: bool # True if needs handshake.
       sslHasPeekChar: bool
@@ -517,13 +517,9 @@ proc fromSockAddr*(sa: Sockaddr_storage | SockAddr | Sockaddr_in | Sockaddr_in6,
   fromSockAddrAux(cast[ptr Sockaddr_storage](unsafeAddr sa), sl, address, port)
 
 when defineSsl:
-  CRYPTO_malloc_init()
-  doAssert SslLibraryInit() == 1
-  SSL_load_error_strings()
-  ERR_load_BIO_strings()
-  OpenSSL_add_all_algorithms()
+  const sslErrorStringBuf = 256
 
-  proc sslHandle*(self: Socket): SslPtr =
+  proc sslHandle*(self: Socket): ptr SSL =
     ## Retrieve the ssl pointer of `socket`.
     ## Useful for interfacing with `openssl`.
     self.sslHandle
@@ -535,13 +531,10 @@ when defineSsl:
     let err = ERR_peek_last_error()
     if err == 0:
       raise newException(SslError, "No error reported.")
-    var errStr = $ERR_error_string(err, nil)
-    case err
-    of 336032814, 336032784:
-      errStr = "Please upgrade your OpenSSL library, it does not support the " &
-               "necessary protocols. OpenSSL error is: " & errStr
-    else:
-      discard
+    var errStr = newString(sslErrorStringBuf)
+    ERR_error_string_n(err, errStr, csize_t len(errStr))
+    errStr.setLen(errStr.find('\0')) # Trim to first NUL
+
     raise newException(SslError, errStr)
 
   proc getExtraData*(ctx: SslContext, index: int): RootRef =
@@ -567,7 +560,7 @@ when defineSsl:
     GC_ref(data)
 
   # http://simplestcodings.blogspot.co.uk/2010/08/secure-server-client-using-openssl-in-c.html
-  proc loadCertificates(ctx: SslCtx, certFile, keyFile: string) =
+  proc loadCertificates(ctx: ptr SSL_CTX, certFile, keyFile: string) =
     if certFile != "" and not fileExists(certFile):
       raise newException(system.IOError,
           "Certificate file could not be found: " & certFile)
@@ -590,6 +583,7 @@ when defineSsl:
 
   proc newContext*(protVersion = protSSLv23, verifyMode = CVerifyPeer,
                    certFile = "", keyFile = "", cipherList = CiphersIntermediate,
+                   ciphersuiteList = CiphersuitesIntermediate,
                    caDir = "", caFile = ""): SslContext =
     ## Creates an SSL context.
     ##
@@ -622,32 +616,20 @@ when defineSsl:
     ## or using ECDSA:
     ## - `openssl ecparam -out mykey.pem -name secp256k1 -genkey`
     ## - `openssl req -new -key mykey.pem -x509 -nodes -days 365 -out mycert.pem`
-    var newCTX: SslCtx
+    var newCTX: ptr SSL_CTX
     case protVersion
     of protSSLv23:
-      newCTX = SSL_CTX_new(SSLv23_method()) # SSlv2,3 and TLS1 support.
+      newCTX = SSL_CTX_new(TLS_method()) # SSlv2,3 and TLS1 support.
     of protSSLv2:
       raiseSSLError("SSLv2 is no longer secure and has been deprecated, use protSSLv23")
     of protSSLv3:
       raiseSSLError("SSLv3 is no longer secure and has been deprecated, use protSSLv23")
     of protTLSv1:
-      newCTX = SSL_CTX_new(TLSv1_method())
+      raiseSSLError("TLSv1.0 is no longer secure and has been deprecated, use protSSLv23")
 
     if newCTX.SSL_CTX_set_cipher_list(cipherList) != 1:
       raiseSSLError()
-    when not defined(openssl10) and not defined(libressl):
-      let sslVersion = getOpenSSLVersion()
-      if sslVersion >= 0x010101000 and not sslVersion == 0x020000000:
-        # In OpenSSL >= 1.1.1, TLSv1.3 cipher suites can only be configured via
-        # this API.
-        if newCTX.SSL_CTX_set_ciphersuites(cipherList) != 1:
-          raiseSSLError()
-    # Automatically the best ECDH curve for client exchange. Without this, ECDH
-    # ciphers will be ignored by the server.
-    #
-    # From OpenSSL >= 1.1.0, this setting is set by default and can't be
-    # overriden.
-    if newCTX.SSL_CTX_set_ecdh_auto(1) != 1:
+    if newCTX.SSL_CTX_set_ciphersuites(ciphersuiteList) != 1:
       raiseSSLError()
 
     when defined(nimDisableCertificateValidation):
@@ -662,7 +644,6 @@ when defineSsl:
     if newCTX == nil:
       raiseSSLError()
 
-    discard newCTX.SSLCTXSetMode(SSL_MODE_AUTO_RETRY)
     newCTX.loadCertificates(certFile, keyFile)
 
     const VerifySuccess = 1 # SSL_CTX_load_verify_locations returns 1 on success.
@@ -679,8 +660,23 @@ when defineSsl:
           # the SSL_CERT_FILE and SSL_CERT_DIR env vars
           var found = false
           let useEnvVars = (if verifyMode == CVerifyPeerUseEnvVars: true else: false)
+
+          when defined(windows) and not defined(nimOpenssl111):
+            # NOTE: Success does not meant that the store exist. So the searching
+            # logic must continue afterwards.
+            #
+            # If both a certificate file and a store exist, then OpenSSL will
+            # search the file before searching the store.
+            if newCTX.SSL_CTX_load_verify_store("org.openssl.winstore://") == VerifySuccess:
+              # Be optimistic and assume that the store exist and can fulfill
+              # the same purpose as cacert.pem, so not finding a CA file
+              # shouldn't be fatal.
+              found = true
+            else:
+              raiseSSLError()
+            
           for fn in scanSSLCertificates(useEnvVars = useEnvVars):
-            if newCTX.SSL_CTX_load_verify_locations(fn, nil) == VerifySuccess:
+            if newCTX.SSL_CTX_load_verify_file(fn) == VerifySuccess:
               found = true
               break
           if not found:
@@ -712,8 +708,8 @@ when defineSsl:
   proc clientGetPskFunc*(ctx: SslContext): SslClientGetPskFunc =
     return ctx.getExtraInternal().clientGetPskFunc
 
-  proc pskClientCallback(ssl: SslPtr; hint: cstring; identity: cstring;
-      max_identity_len: cuint; psk: ptr uint8;
+  proc pskClientCallback(ssl: ptr SSL; hint: cstring; identity: cstring;
+      max_identity_len: cuint; psk: ptr UncheckedArray[cuchar];
       max_psk_len: cuint): cuint {.cdecl.} =
     let ctx = SslContext(context: ssl.SSL_get_SSL_CTX)
     let hintString = if hint == nil: "" else: $hint
@@ -739,11 +735,11 @@ when defineSsl:
   proc serverGetPskFunc*(ctx: SslContext): SslServerGetPskFunc =
     return ctx.getExtraInternal().serverGetPskFunc
 
-  proc pskServerCallback(ssl: SslCtx; identity: cstring; psk: ptr uint8;
-      max_psk_len: cint): cuint {.cdecl.} =
+  proc pskServerCallback(ssl: ptr SSL; identity: cstring; psk: ptr UncheckedArray[cuchar];
+      max_psk_len: cuint): cuint {.cdecl.} =
     let ctx = SslContext(context: ssl.SSL_get_SSL_CTX)
     let pskString = (ctx.serverGetPskFunc)($identity)
-    if pskString.len.cint > max_psk_len:
+    if pskString.len.cuint > max_psk_len:
       return 0
     copyMem(psk, pskString.cstring, pskString.len)
 
@@ -783,25 +779,26 @@ when defineSsl:
     if socket.sslHandle == nil:
       raiseSSLError()
 
-    if SSL_set_fd(socket.sslHandle, socket.fd) != 1:
+    if SSL_set_fd(socket.sslHandle, socket.fd.cint) != 1:
       raiseSSLError()
 
   proc checkCertName(socket: Socket, hostname: string) =
     ## Check if the certificate Subject Alternative Name (SAN) or Subject CommonName (CN) matches hostname.
     ## Wildcards match only in the left-most label.
     ## When name starts with a dot it will be matched by a certificate valid for any subdomain
-    when not defined(nimDisableCertificateValidation) and not defined(windows):
+    when not defined(nimDisableCertificateValidation):
       assert socket.isSsl
-      let certificate = socket.sslHandle.SSL_get_peer_certificate()
+      when not defined(nimOpenssl111):
+        let certificate = socket.sslHandle.SSL_get0_peer_certificate()
+      else:
+        let certificate = socket.sslHandle.SSL_get_peer_certificate()
+        defer: X509_free(certificate)
       if certificate.isNil:
         raiseSSLError("No SSL certificate found.")
 
-      const X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT = 0x1.cuint
       # https://www.openssl.org/docs/man1.1.1/man3/X509_check_host.html
-      let match = certificate.X509_check_host(hostname.cstring, hostname.len.cint,
+      let match = certificate.X509_check_host(hostname.cstring, hostname.len.csize_t,
         X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT, nil)
-      # https://www.openssl.org/docs/man1.1.1/man3/SSL_get_peer_certificate.html
-      X509_free(certificate)
       if match != 1:
         raiseSSLError("SSL Certificate check failed.")
 
@@ -826,18 +823,28 @@ when defineSsl:
         # Discard result in case OpenSSL version doesn't support SNI, or we're
         # not using TLSv1+
         discard SSL_set_tlsext_host_name(socket.sslHandle, hostname)
-      ErrClearError()
+      ERR_clear_error()
       let ret = SSL_connect(socket.sslHandle)
       socketError(socket, ret)
-      when not defined(nimDisableCertificateValidation) and not defined(windows):
+      when not defined(nimDisableCertificateValidation):
         if hostname.len > 0 and not isIpAddress(hostname):
           socket.checkCertName(hostname)
     of handshakeAsServer:
-      ErrClearError()
+      ERR_clear_error()
       let ret = SSL_accept(socket.sslHandle)
       socketError(socket, ret)
 
-  proc getPeerCertificates*(sslHandle: SslPtr): seq[Certificate] {.since: (1, 1).} =
+  proc toCertificate(cert: ptr X509): Certificate =
+    ## Encode `cert` to DER representation
+    let len = i2d_X509(cert, nil)
+    result = newString(len)
+    var buf = cast[ptr UncheckedArray[cuchar]](addr result[0])
+    let encLen = i2d_X509(cert, addr buf)
+    if encLen.int <= 0:
+      raiseSSLError("X.509 certificate encoding failed")
+    result.setLen(encLen)
+
+  proc getPeerCertificates*(sslHandle: ptr SSL): seq[Certificate] {.since: (1, 1).} =
     ## Returns the certificate chain received by the peer we are connected to
     ## through the OpenSSL connection represented by `sslHandle`.
     ## The handshake must have been completed and the certificate chain must
@@ -849,12 +856,12 @@ when defineSsl:
     let stack = SSL_get0_verified_chain(sslHandle)
     if stack == nil:
       return
-    let length = OPENSSL_sk_num(stack)
+    let length = stack.num
     if length == 0:
       return
     for i in 0 .. length - 1:
-      let x509 = cast[PX509](OPENSSL_sk_value(stack, i))
-      result.add(i2d_X509(x509))
+      let x509 = stack.value(i)
+      result.add(x509.toCertificate())
 
   proc getPeerCertificates*(socket: Socket): seq[Certificate] {.since: (1, 1).} =
     ## Returns the certificate chain received by the peer we are connected to
@@ -881,7 +888,8 @@ when defineSsl:
     ## - sidCtx must be at most 32 characters in length.
     if sidCtx.len > 32:
       raiseSSLError("sessionIdContext must be shorter than 32 characters")
-    SSL_CTX_set_session_id_context(ctx.context, sidCtx, sidCtx.len)
+    # The error condition is already handled above
+    discard SSL_CTX_set_session_id_context(ctx.context, cast[ptr UncheckedArray[cuchar]](addr sidCtx[0]), cuint(sidCtx.len))
 
 proc getSocketError*(socket: Socket): OSErrorCode =
   ## Checks `osLastError` for a valid error. If it has been reset it uses
@@ -934,8 +942,10 @@ proc socketError*(socket: Socket, err: int = -1, async = false,
             elif sslErr == 0 and err == -1:
               errStr.add "in the BIO layer"
             else:
-              let errStr = $ERR_error_string(sslErr, nil)
-              raiseSSLError(errStr & ": " & errStr)
+              var sslErrStr = newString(sslErrorStringBuf)
+              ERR_error_string_n(sslErr, sslErrStr, csize_t(sslErrStr.len))
+              sslErrStr.setLen(sslErrStr.find('\0')) # Trim to first NUL
+              raiseSSLError(errStr & ": " & sslErrStr)
             raiseOSError(osErr, errStr)
         of SSL_ERROR_SSL:
           # SSL shutdown must not be done if a fatal error occurred.
@@ -1030,7 +1040,7 @@ proc acceptAddr*(server: Socket, client: var owned(Socket), address: var string,
         # We must wrap the client sock in a ssl context.
 
         server.sslContext.wrapSocket(client)
-        ErrClearError()
+        ERR_clear_error()
         let ret = SSL_accept(client.sslHandle)
         socketError(client, ret, false)
 
@@ -1060,7 +1070,7 @@ when false: #defineSsl:
 
           if not client.isSsl or client.sslHandle == nil:
             server.sslContext.wrapSocket(client)
-          ErrClearError()
+          ERR_clear_error()
           let ret = SSL_accept(client.sslHandle)
           while ret <= 0:
             let err = SSL_get_error(client.sslHandle, ret)
@@ -1183,7 +1193,7 @@ proc close*(socket: Socket, flags = {SocketFlag.SafeDisconn}) =
           # shutdown i.e not wait for the peers "close notify" alert with a second
           # call to SSL_shutdown
           blockSigpipe:
-            ErrClearError()
+            ERR_clear_error()
             let res = SSL_shutdown(socket.sslHandle)
             if res == 0:
               discard
@@ -1325,7 +1335,7 @@ proc uniRecv(socket: Socket, buffer: pointer, size, flags: cint): int =
   assert(not socket.isClosed, "Cannot `recv` on a closed socket")
   when defineSsl:
     if socket.isSsl:
-      ErrClearError()
+      ERR_clear_error()
       return SSL_read(socket.sslHandle, buffer, size)
 
   return recv(socket.fd, buffer, size, flags)
@@ -1682,8 +1692,8 @@ proc send*(socket: Socket, data: pointer, size: int): int {.
   assert(not socket.isClosed, "Cannot `send` on a closed socket")
   when defineSsl:
     if socket.isSsl:
-      ErrClearError()
-      return SSL_write(socket.sslHandle, cast[cstring](data), size)
+      ERR_clear_error()
+      return SSL_write(socket.sslHandle, cast[cstring](data), size.cint)
 
   when useWinVersion or defined(macosx):
     result = send(socket.fd, data, size.cint, 0'i32)
@@ -1997,10 +2007,10 @@ proc connect*(socket: Socket, address: string,
         # not using TLSv1+
         discard SSL_set_tlsext_host_name(socket.sslHandle, address)
 
-      ErrClearError()
+      ERR_clear_error()
       let ret = SSL_connect(socket.sslHandle)
       socketError(socket, ret)
-      when not defined(nimDisableCertificateValidation) and not defined(windows):
+      when not defined(nimDisableCertificateValidation):
         if not isIpAddress(address):
           socket.checkCertName(address)
 
@@ -2066,7 +2076,7 @@ proc connect*(socket: Socket, address: string, port = Port(0),
           # not using TLSv1+
           discard SSL_set_tlsext_host_name(socket.sslHandle, address)
 
-        ErrClearError()
+        ERR_clear_error()
         let ret = SSL_connect(socket.sslHandle)
         socketError(socket, ret)
         when not defined(nimDisableCertificateValidation):
diff --git a/lib/pure/ssl_config.nim b/lib/pure/ssl_config.nim
index 14f66ede41c..850f591e930 100644
--- a/lib/pure/ssl_config.nim
+++ b/lib/pure/ssl_config.nim
@@ -1,11 +1,11 @@
-# This file was automatically generated by tools/ssl_config_parser on 2020-06-03T22:02:05Z. DO NOT EDIT.
+# This file was automatically generated by tools/ssl_config_parser on 2024-06-07T06:24:03Z. DO NOT EDIT.
 
 ## This module contains SSL configuration parameters obtained from
 ## `Mozilla OpSec <https://wiki.mozilla.org/Security/Server_Side_TLS>`_.
 ##
-## The configuration file used to generate this module: https://ssl-config.mozilla.org/guidelines/5.4.json
+## The configuration file used to generate this module: https://ssl-config.mozilla.org/guidelines/5.7.json
 
-const CiphersModern* = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256"
+const CiphersModern* = ""
   ## An OpenSSL-compatible list of secure ciphers for ``modern`` compatibility
   ## per Mozilla's recommendations.
   ##
@@ -19,7 +19,14 @@ const CiphersModern* = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA
   ## * Opera 57
   ## * Safari 12.1
 
-const CiphersIntermediate* = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"
+
+const CiphersuitesModern* = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256"
+  ## An OpenSSL-compatible list of secure ciphersuites for ``modern`` compatibility
+  ## per Mozilla's recommendations.
+  ##
+  ## To be employed with ``CiphersModern``
+
+const CiphersIntermediate* = "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305"
   ## An OpenSSL-compatible list of secure ciphers for ``intermediate`` compatibility
   ## per Mozilla's recommendations.
   ##
@@ -34,7 +41,14 @@ const CiphersIntermediate* = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_
   ## * Opera 20
   ## * Safari 9
 
-const CiphersOld* = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA"
+
+const CiphersuitesIntermediate* = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256"
+  ## An OpenSSL-compatible list of secure ciphersuites for ``intermediate`` compatibility
+  ## per Mozilla's recommendations.
+  ##
+  ## To be employed with ``CiphersIntermediate``
+
+const CiphersOld* = "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA"
   ## An OpenSSL-compatible list of secure ciphers for ``old`` compatibility
   ## per Mozilla's recommendations.
   ##
@@ -49,3 +63,10 @@ const CiphersOld* = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_
   ## * Opera 5
   ## * Safari 1
 
+
+const CiphersuitesOld* = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256"
+  ## An OpenSSL-compatible list of secure ciphersuites for ``old`` compatibility
+  ## per Mozilla's recommendations.
+  ##
+  ## To be employed with ``CiphersOld``
+
diff --git a/lib/wrappers/openssl.nim b/lib/wrappers/openssl.nim
deleted file mode 100644
index cdc3969d0f6..00000000000
--- a/lib/wrappers/openssl.nim
+++ /dev/null
@@ -1,859 +0,0 @@
-#
-#
-#            Nim's Runtime Library
-#        (c) Copyright 2015 Andreas Rumpf
-#
-#    See the file "copying.txt", included in this
-#    distribution, for details about the copyright.
-#
-
-## OpenSSL support
-##
-## When OpenSSL is dynamically linked, the wrapper provides partial forward and backward
-## compatibility for OpenSSL versions above and below 1.1.0
-##
-## OpenSSL can also be statically linked using `--dynlibOverride:ssl` for OpenSSL >= 1.1.0.
-## If you want to statically link against OpenSSL 1.0.x, you now have to
-## define the `openssl10` symbol via `-d:openssl10`.
-##
-## Build and test examples:
-##
-## .. code-block::
-##   ./bin/nim c -d:ssl -p:. -r tests/untestable/tssl.nim
-##   ./bin/nim c -d:ssl -p:. --dynlibOverride:ssl --passl:-lcrypto --passl:-lssl -r tests/untestable/tssl.nim
-
-when defined(nimHasStyleChecks):
-  {.push styleChecks: off.}
-
-const useWinVersion = defined(windows) or defined(nimdoc)
-
-# To force openSSL version use -d:sslVersion=1.0.0
-# See: #10281, #10230
-# General issue:
-# Other dynamic libraries (like libpg) load different openSSL version then what nim loads.
-# Having two different openSSL loaded version causes a crash.
-# Use this compile time define to force the openSSL version that your other dynamic libraries want.
-const sslVersion {.strdefine.}: string = ""
-when sslVersion != "":
-  when defined(macosx):
-    const
-      DLLSSLName* = "libssl." & sslVersion & ".dylib"
-      DLLUtilName* = "libcrypto." & sslVersion & ".dylib"
-    from std/posix import SocketHandle
-  elif defined(windows):
-    const
-      DLLSSLName* = "libssl-" & sslVersion & ".dll"
-      DLLUtilName* =  "libcrypto-" & sslVersion & ".dll"
-    from std/winlean import SocketHandle
-  else:
-    const
-      DLLSSLName* = "libssl.so." & sslVersion
-      DLLUtilName* = "libcrypto.so." & sslVersion
-    from std/posix import SocketHandle
-
-elif useWinVersion:
-  when defined(openssl10) or defined(nimOldDlls):
-    when defined(cpu64):
-      const
-        DLLSSLName* = "(ssleay32|ssleay64).dll"
-        DLLUtilName* = "(libeay32|libeay64).dll"
-    else:
-      const
-        DLLSSLName* = "ssleay32.dll"
-        DLLUtilName* = "libeay32.dll"
-  elif defined(cpu64):
-    const
-      DLLSSLName* = "(libssl-1_1-x64|ssleay64|libssl64).dll"
-      DLLUtilName* = "(libcrypto-1_1-x64|libeay64).dll"
-  else:
-    const
-      DLLSSLName* = "(libssl-1_1|ssleay32|libssl32).dll"
-      DLLUtilName* = "(libcrypto-1_1|libeay32).dll"
-
-  from std/winlean import SocketHandle
-else:
-  when defined(osx):
-    const versions = "(.1.1|.38|.39|.41|.43|.44|.45|.46|.47|.48|.10|.1.0.2|.1.0.1|.1.0.0|.0.9.9|.0.9.8|)"
-  else:
-    const versions = "(.1.1|.1.0.2|.1.0.1|.1.0.0|.0.9.9|.0.9.8|.48|.47|.46|.45|.44|.43|.41|.39|.38|.10|)"
-
-  when defined(macosx):
-    const
-      DLLSSLName* = "libssl" & versions & ".dylib"
-      DLLUtilName* = "libcrypto" & versions & ".dylib"
-  else:
-    const
-      DLLSSLName* = "libssl.so" & versions
-      DLLUtilName* = "libcrypto.so" & versions
-  from std/posix import SocketHandle
-
-import std/dynlib
-
-type
-  SslStruct {.final, pure.} = object
-  SslPtr* = ptr SslStruct
-  PSslPtr* = ptr SslPtr
-  SslCtx* = SslPtr
-  PSSL_METHOD* = SslPtr
-  PSTACK* = SslPtr
-  PX509* = SslPtr
-  PX509_NAME* = SslPtr
-  PEVP_MD* = SslPtr
-  PBIO_METHOD* = SslPtr
-  BIO* = SslPtr
-  EVP_PKEY* = SslPtr
-  PRSA* = SslPtr
-  PASN1_UTCTIME* = SslPtr
-  PASN1_cInt* = SslPtr
-  PPasswdCb* = SslPtr
-  EVP_MD* = SslPtr
-  EVP_MD_CTX* = SslPtr
-  EVP_PKEY_CTX* = SslPtr
-  ENGINE* = SslPtr
-  PFunction* = proc () {.cdecl.}
-  DES_cblock* = array[0..7, int8]
-  PDES_cblock* = ptr DES_cblock
-  des_ks_struct*{.final.} = object
-    ks*: DES_cblock
-    weak_key*: cint
-
-  des_key_schedule* = array[1..16, des_ks_struct]
-
-  pem_password_cb* = proc(buf: cstring, size, rwflag: cint, userdata: pointer): cint {.cdecl.}
-
-  PaddingType* = enum
-    RSA_PKCS1_PADDING = 1.cint,
-    RSA_SSLV23_PADDING = 2.cint,
-    RSA_NO_PADDING = 3.cint,
-    RSA_PKCS1_OAEP_PADDING = 4.cint,
-    RSA_X931_PADDING = 5.cint,
-    RSA_PKCS1_PSS_PADDING = 6.cint
-
-
-const
-  SSL_SENT_SHUTDOWN* = 1
-  SSL_RECEIVED_SHUTDOWN* = 2
-  EVP_MAX_MD_SIZE* = 16 + 20
-  SSL_ERROR_NONE* = 0
-  SSL_ERROR_SSL* = 1
-  SSL_ERROR_WANT_READ* = 2
-  SSL_ERROR_WANT_WRITE* = 3
-  SSL_ERROR_WANT_X509_LOOKUP* = 4
-  SSL_ERROR_SYSCALL* = 5      #look at error stack/return value/errno
-  SSL_ERROR_ZERO_RETURN* = 6
-  SSL_ERROR_WANT_CONNECT* = 7
-  SSL_ERROR_WANT_ACCEPT* = 8
-  SSL_CTRL_NEED_TMP_RSA* = 1
-  SSL_CTRL_SET_TMP_RSA* = 2
-  SSL_CTRL_SET_TMP_DH* = 3
-  SSL_CTRL_SET_TMP_ECDH* = 4
-  SSL_CTRL_SET_TMP_RSA_CB* = 5
-  SSL_CTRL_SET_TMP_DH_CB* = 6
-  SSL_CTRL_SET_TMP_ECDH_CB* = 7
-  SSL_CTRL_GET_SESSION_REUSED* = 8
-  SSL_CTRL_GET_CLIENT_CERT_REQUEST* = 9
-  SSL_CTRL_GET_NUM_RENEGOTIATIONS* = 10
-  SSL_CTRL_CLEAR_NUM_RENEGOTIATIONS* = 11
-  SSL_CTRL_GET_TOTAL_RENEGOTIATIONS* = 12
-  SSL_CTRL_GET_FLAGS* = 13
-  SSL_CTRL_EXTRA_CHAIN_CERT* = 14
-  SSL_CTRL_SET_MSG_CALLBACK* = 15
-  SSL_CTRL_SET_MSG_CALLBACK_ARG* = 16 # only applies to datagram connections
-  SSL_CTRL_SET_MTU* = 17      # Stats
-  SSL_CTRL_SESS_NUMBER* = 20
-  SSL_CTRL_SESS_CONNECT* = 21
-  SSL_CTRL_SESS_CONNECT_GOOD* = 22
-  SSL_CTRL_SESS_CONNECT_RENEGOTIATE* = 23
-  SSL_CTRL_SESS_ACCEPT* = 24
-  SSL_CTRL_SESS_ACCEPT_GOOD* = 25
-  SSL_CTRL_SESS_ACCEPT_RENEGOTIATE* = 26
-  SSL_CTRL_SESS_HIT* = 27
-  SSL_CTRL_SESS_CB_HIT* = 28
-  SSL_CTRL_SESS_MISSES* = 29
-  SSL_CTRL_SESS_TIMEOUTS* = 30
-  SSL_CTRL_SESS_CACHE_FULL* = 31
-  SSL_CTRL_OPTIONS* = 32
-  SSL_CTRL_MODE* = 33
-  SSL_CTRL_GET_READ_AHEAD* = 40
-  SSL_CTRL_SET_READ_AHEAD* = 41
-  SSL_CTRL_SET_SESS_CACHE_SIZE* = 42
-  SSL_CTRL_GET_SESS_CACHE_SIZE* = 43
-  SSL_CTRL_SET_SESS_CACHE_MODE* = 44
-  SSL_CTRL_GET_SESS_CACHE_MODE* = 45
-  SSL_CTRL_GET_MAX_CERT_LIST* = 50
-  SSL_CTRL_SET_MAX_CERT_LIST* = 51 #* Allow SSL_write(..., n) to return r with 0 < r < n (i.e. report success
-                                   # * when just a single record has been written): *
-  SSL_CTRL_SET_TLSEXT_SERVERNAME_CB = 53
-  SSL_CTRL_SET_TLSEXT_SERVERNAME_ARG = 54
-  SSL_CTRL_SET_TLSEXT_HOSTNAME = 55
-  SSL_CTRL_SET_ECDH_AUTO* = 94
-  TLSEXT_NAMETYPE_host_name* = 0
-  SSL_TLSEXT_ERR_OK* = 0
-  SSL_TLSEXT_ERR_ALERT_WARNING* = 1
-  SSL_TLSEXT_ERR_ALERT_FATAL* = 2
-  SSL_TLSEXT_ERR_NOACK* = 3
-  SSL_MODE_ENABLE_PARTIAL_WRITE* = 1 #* Make it possible to retry SSL_write() with changed buffer location
-                                     # * (buffer contents must stay the same!); this is not the default to avoid
-                                     # * the misconception that non-blocking SSL_write() behaves like
-                                     # * non-blocking write(): *
-  SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER* = 2 #* Never bother the application with retries if the transport
-                                           # * is blocking: *
-  SSL_MODE_AUTO_RETRY* = 4    #* Don't attempt to automatically build certificate chain *
-  SSL_MODE_NO_AUTO_CHAIN* = 8
-  SSL_OP_NO_SSLv2* = 0x01000000
-  SSL_OP_NO_SSLv3* = 0x02000000
-  SSL_OP_NO_TLSv1* = 0x04000000
-  SSL_OP_NO_TLSv1_1* = 0x08000000
-  SSL_OP_ALL* = 0x000FFFFF
-  SSL_VERIFY_NONE* = 0x00000000
-  SSL_VERIFY_PEER* = 0x00000001
-  SSL_ST_CONNECT* = 0x1000
-  SSL_ST_ACCEPT* = 0x2000
-  SSL_ST_INIT* = SSL_ST_CONNECT or SSL_ST_ACCEPT
-  OPENSSL_DES_DECRYPT* = 0
-  OPENSSL_DES_ENCRYPT* = 1
-  X509_V_OK* = 0
-  X509_V_ILLEGAL* = 1
-  X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT* = 2
-  X509_V_ERR_UNABLE_TO_GET_CRL* = 3
-  X509_V_ERR_UNABLE_TO_DECRYPT_CERT_SIGNATURE* = 4
-  X509_V_ERR_UNABLE_TO_DECRYPT_CRL_SIGNATURE* = 5
-  X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY* = 6
-  X509_V_ERR_CERT_SIGNATURE_FAILURE* = 7
-  X509_V_ERR_CRL_SIGNATURE_FAILURE* = 8
-  X509_V_ERR_CERT_NOT_YET_VALID* = 9
-  X509_V_ERR_CERT_HAS_EXPIRED* = 10
-  X509_V_ERR_CRL_NOT_YET_VALID* = 11
-  X509_V_ERR_CRL_HAS_EXPIRED* = 12
-  X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD* = 13
-  X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD* = 14
-  X509_V_ERR_ERROR_IN_CRL_LAST_UPDATE_FIELD* = 15
-  X509_V_ERR_ERROR_IN_CRL_NEXT_UPDATE_FIELD* = 16
-  X509_V_ERR_OUT_OF_MEM* = 17
-  X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT* = 18
-  X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN* = 19
-  X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY* = 20
-  X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE* = 21
-  X509_V_ERR_CERT_CHAIN_TOO_LONG* = 22
-  X509_V_ERR_CERT_REVOKED* = 23
-  X509_V_ERR_INVALID_CA* = 24
-  X509_V_ERR_PATH_LENGTH_EXCEEDED* = 25
-  X509_V_ERR_INVALID_PURPOSE* = 26
-  X509_V_ERR_CERT_UNTRUSTED* = 27
-  X509_V_ERR_CERT_REJECTED* = 28 #These are 'informational' when looking for issuer cert
-  X509_V_ERR_SUBJECT_ISSUER_MISMATCH* = 29
-  X509_V_ERR_AKID_SKID_MISMATCH* = 30
-  X509_V_ERR_AKID_ISSUER_SERIAL_MISMATCH* = 31
-  X509_V_ERR_KEYUSAGE_NO_CERTSIGN* = 32
-  X509_V_ERR_UNABLE_TO_GET_CRL_ISSUER* = 33
-  X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION* = 34 #The application is not happy
-  X509_V_ERR_APPLICATION_VERIFICATION* = 50
-  SSL_FILETYPE_ASN1* = 2
-  SSL_FILETYPE_PEM* = 1
-  EVP_PKEY_RSA* = 6           # libssl.dll
-
-  BIO_C_SET_CONNECT = 100
-  BIO_C_DO_STATE_MACHINE = 101
-  BIO_C_GET_SSL = 110
-
-proc TLSv1_method*(): PSSL_METHOD{.cdecl, dynlib: DLLSSLName, importc.}
-
-# TLS_method(), TLS_server_method(), TLS_client_method() are introduced in 1.1.0
-# and support SSLv3, TLSv1, TLSv1.1 and TLSv1.2
-# SSLv23_method(), SSLv23_server_method(), SSLv23_client_method() are removed in 1.1.0
-
-when compileOption("dynlibOverride", "ssl") or defined(noOpenSSLHacks):
-  # Static linking
-
-  when defined(openssl10):
-    proc SSL_library_init*(): cint {.cdecl, dynlib: DLLSSLName, importc, discardable.}
-    proc SSL_load_error_strings*() {.cdecl, dynlib: DLLSSLName, importc.}
-    proc SSLv23_method*(): PSSL_METHOD {.cdecl, dynlib: DLLSSLName, importc.}
-    proc SSLeay(): culong {.cdecl, dynlib: DLLUtilName, importc.}
-
-    proc getOpenSSLVersion*(): culong =
-      SSLeay()
-  else:
-    proc OPENSSL_init_ssl*(opts: uint64, settings: uint8): cint {.cdecl, dynlib: DLLSSLName, importc, discardable.}
-    proc SSL_library_init*(): cint {.discardable.} =
-      ## Initialize SSL using OPENSSL_init_ssl for OpenSSL >= 1.1.0
-      return OPENSSL_init_ssl(0.uint64, 0.uint8)
-
-    proc TLS_method*(): PSSL_METHOD {.cdecl, dynlib: DLLSSLName, importc.}
-    proc SSLv23_method*(): PSSL_METHOD =
-      TLS_method()
-
-    proc OpenSSL_version_num(): culong {.cdecl, dynlib: DLLUtilName, importc.}
-
-    proc getOpenSSLVersion*(): culong =
-      ## Return OpenSSL version as unsigned long
-      OpenSSL_version_num()
-
-    proc SSL_load_error_strings*() =
-      ## Removed from OpenSSL 1.1.0
-      # This proc prevents breaking existing code calling SslLoadErrorStrings
-      # Static linking against OpenSSL < 1.1.0 is not supported
-      discard
-
-  when defined(libressl) or defined(openssl10):
-    proc SSL_state(ssl: SslPtr): cint {.cdecl, dynlib: DLLSSLName, importc.}
-    proc SSL_in_init*(ssl: SslPtr): cint {.inline.} =
-      SSl_state(ssl) and SSL_ST_INIT
-  else:
-    proc SSL_in_init*(ssl: SslPtr): cint {.cdecl, dynlib: DLLSSLName, importc.}
-    proc SSL_CTX_set_ciphersuites*(ctx: SslCtx, str: cstring): cint {.cdecl, dynlib: DLLSSLName, importc.}
-
-  template OpenSSL_add_all_algorithms*() = discard
-
-  proc SSLv23_client_method*(): PSSL_METHOD {.cdecl, dynlib: DLLSSLName, importc.}
-  proc SSLv2_method*(): PSSL_METHOD {.cdecl, dynlib: DLLSSLName, importc.}
-  proc SSLv3_method*(): PSSL_METHOD {.cdecl, dynlib: DLLSSLName, importc.}
-
-else:
-  # Here we're trying to stay compatible with openssl 1.0.* and 1.1.*. Some
-  # symbols are loaded dynamically and we don't use them if not found.
-  proc thisModule(): LibHandle {.inline.} =
-    var thisMod {.global.}: LibHandle
-    if thisMod.isNil: thisMod = loadLib()
-
-    result = thisMod
-
-  proc sslModule(): LibHandle {.inline.} =
-    var sslMod {.global.}: LibHandle
-    if sslMod.isNil: sslMod = loadLibPattern(DLLSSLName)
-
-    result = sslMod
-
-  proc utilModule(): LibHandle {.inline.} =
-    var utilMod {.global.}: LibHandle
-    if utilMod.isNil: utilMod = loadLibPattern(DLLUtilName)
-
-    result = utilMod
-
-  proc symNullable(dll: LibHandle, name: string, alternativeName = ""): pointer =
-    # Load from DLL.
-    if not dll.isNil:
-      result = symAddr(dll, name)
-      if result.isNil and alternativeName.len > 0:
-        result = symAddr(dll, alternativeName)
-
-    # Attempt to load from current exe.
-    if result.isNil:
-      let thisDynlib = thisModule()
-      if thisDynlib.isNil: return nil
-      result = symAddr(thisDynlib, name)
-      if result.isNil and alternativeName.len > 0:
-        result = symAddr(thisDynlib, alternativeName)
-
-  proc sslSymNullable(name: string, alternativeName = ""): pointer =
-    sslModule().symNullable(name, alternativeName)
-
-  proc sslSymThrows(name: string, alternativeName = ""): pointer =
-    result = sslSymNullable(name, alternativeName)
-    if result.isNil: raiseInvalidLibrary(name)
-
-  proc utilSymNullable(name: string, alternativeName = ""): pointer =
-    utilModule().symNullable(name, alternativeName)
-
-  proc loadPSSLMethod(method1, method2: string): PSSL_METHOD =
-    ## Load <method1> from OpenSSL if available, otherwise <method2>
-    ##
-    let methodSym = sslSymNullable(method1, method2)
-    if methodSym.isNil:
-      raise newException(LibraryError, "Could not load " & method1 & " nor " & method2)
-
-    let method2Proc = cast[proc(): PSSL_METHOD {.cdecl, gcsafe.}](methodSym)
-    return method2Proc()
-
-  proc SSL_library_init*(): cint {.discardable.} =
-    ## Initialize SSL using OPENSSL_init_ssl for OpenSSL >= 1.1.0 otherwise
-    ## SSL_library_init
-    let newInitSym = sslSymNullable("OPENSSL_init_ssl")
-    if not newInitSym.isNil:
-      let newInitProc =
-        cast[proc(opts: uint64, settings: uint8): cint {.cdecl.}](newInitSym)
-      return newInitProc(0, 0)
-    let olderProc = cast[proc(): cint {.cdecl.}](sslSymThrows("SSL_library_init"))
-    if not olderProc.isNil: result = olderProc()
-
-  proc SSL_load_error_strings*() =
-    # TODO: Are we ignoring this on purpose? SSL GitHub CI fails otherwise.
-    let theProc = cast[proc() {.cdecl.}](sslSymNullable("SSL_load_error_strings"))
-    if not theProc.isNil: theProc()
-
-  proc SSLv23_client_method*(): PSSL_METHOD =
-    loadPSSLMethod("SSLv23_client_method", "TLS_client_method")
-
-  proc SSLv23_method*(): PSSL_METHOD =
-    loadPSSLMethod("SSLv23_method", "TLS_method")
-
-  proc SSLv2_method*(): PSSL_METHOD =
-    loadPSSLMethod("SSLv2_method", "TLS_method")
-
-  proc SSLv3_method*(): PSSL_METHOD =
-    loadPSSLMethod("SSLv3_method", "TLS_method")
-
-  proc TLS_method*(): PSSL_METHOD =
-    loadPSSLMethod("TLS_method", "SSLv23_method")
-
-  proc TLS_client_method*(): PSSL_METHOD =
-    loadPSSLMethod("TLS_client_method", "SSLv23_client_method")
-
-  proc TLS_server_method*(): PSSL_METHOD =
-    loadPSSLMethod("TLS_server_method", "SSLv23_server_method")
-
-  proc OpenSSL_add_all_algorithms*() =
-    # TODO: Are we ignoring this on purpose? SSL GitHub CI fails otherwise.
-    let theProc = cast[proc() {.cdecl.}](sslSymNullable("OPENSSL_add_all_algorithms_conf"))
-    if not theProc.isNil: theProc()
-
-  proc getOpenSSLVersion*(): culong =
-    ## Return OpenSSL version as unsigned long or 0 if not available
-    let theProc = cast[proc(): culong {.cdecl, gcsafe.}](utilSymNullable("OpenSSL_version_num", "SSLeay"))
-    result =
-      if theProc.isNil: 0.culong
-      else: theProc()
-
-  proc SSL_in_init*(ssl: SslPtr): cint =
-    # A compatibility wrapper for `SSL_in_init()` for OpenSSL 1.0, 1.1 and LibreSSL
-    const MainProc = "SSL_in_init"
-    let
-      theProc {.global.} = cast[proc(ssl: SslPtr): cint {.cdecl, gcsafe.}](sslSymNullable(MainProc))
-      # Fallback
-      sslState {.global.} = cast[proc(ssl: SslPtr): cint {.cdecl, gcsafe.}](sslSymNullable("SSL_state"))
-
-    if not theProc.isNil:
-      result = theProc(ssl)
-    elif not sslState.isNil:
-      result = sslState(ssl) and SSL_ST_INIT
-    else:
-      raiseInvalidLibrary MainProc
-
-  proc SSL_CTX_set_ciphersuites*(ctx: SslCtx, str: cstring): cint =
-    var theProc {.global.}: proc(ctx: SslCtx, str: cstring) {.cdecl, gcsafe.}
-    if theProc.isNil:
-      theProc = cast[typeof(theProc)](sslSymThrows("SSL_CTX_set_ciphersuites"))
-    theProc(ctx, str)
-
-proc ERR_load_BIO_strings*(){.cdecl, dynlib: DLLUtilName, importc.}
-
-proc SSL_new*(context: SslCtx): SslPtr{.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_free*(ssl: SslPtr){.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_get_SSL_CTX*(ssl: SslPtr): SslCtx {.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_set_SSL_CTX*(ssl: SslPtr, ctx: SslCtx): SslCtx {.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_CTX_set_session_id_context*(context: SslCtx, sid_ctx: string, sid_ctx_len: int){.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_get0_verified_chain*(ssl: SslPtr): PSTACK {.cdecl, dynlib: DLLSSLName,
-    importc.}
-proc SSL_CTX_new*(meth: PSSL_METHOD): SslCtx{.cdecl,
-    dynlib: DLLSSLName, importc.}
-proc SSL_CTX_load_verify_locations*(ctx: SslCtx, CAfile: cstring,
-    CApath: cstring): cint{.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_CTX_free*(arg0: SslCtx){.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_CTX_set_verify*(s: SslCtx, mode: int, cb: proc (a: int, b: pointer): int {.cdecl.}){.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_get_verify_result*(ssl: SslPtr): int{.cdecl,
-    dynlib: DLLSSLName, importc.}
-
-proc SSL_CTX_set_cipher_list*(s: SslCtx, ciphers: cstring): cint{.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_CTX_use_certificate_file*(ctx: SslCtx, filename: cstring, typ: cint): cint{.
-    stdcall, dynlib: DLLSSLName, importc.}
-proc SSL_CTX_use_certificate_chain_file*(ctx: SslCtx, filename: cstring): cint{.
-    stdcall, dynlib: DLLSSLName, importc.}
-proc SSL_CTX_use_PrivateKey_file*(ctx: SslCtx,
-    filename: cstring, typ: cint): cint{.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_CTX_check_private_key*(ctx: SslCtx): cint{.cdecl, dynlib: DLLSSLName,
-    importc.}
-
-proc SSL_CTX_get_ex_new_index*(argl: clong, argp: pointer, new_func: pointer, dup_func: pointer, free_func: pointer): cint {.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_CTX_set_ex_data*(ssl: SslCtx, idx: cint, arg: pointer): cint {.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_CTX_get_ex_data*(ssl: SslCtx, idx: cint): pointer {.cdecl, dynlib: DLLSSLName, importc.}
-
-proc SSL_set_fd*(ssl: SslPtr, fd: SocketHandle): cint{.cdecl, dynlib: DLLSSLName, importc.}
-
-proc SSL_shutdown*(ssl: SslPtr): cint{.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_set_shutdown*(ssl: SslPtr, mode: cint) {.cdecl, dynlib: DLLSSLName, importc: "SSL_set_shutdown".}
-proc SSL_get_shutdown*(ssl: SslPtr): cint {.cdecl, dynlib: DLLSSLName, importc: "SSL_get_shutdown".}
-proc SSL_connect*(ssl: SslPtr): cint{.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_read*(ssl: SslPtr, buf: pointer, num: int): cint{.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_write*(ssl: SslPtr, buf: cstring, num: int): cint{.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_get_error*(s: SslPtr, ret_code: cint): cint{.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_accept*(ssl: SslPtr): cint{.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_pending*(ssl: SslPtr): cint{.cdecl, dynlib: DLLSSLName, importc.}
-
-proc BIO_new_mem_buf*(data: pointer, len: cint): BIO{.cdecl,
-    dynlib: DLLUtilName, importc.}
-proc BIO_new_ssl_connect*(ctx: SslCtx): BIO{.cdecl,
-    dynlib: DLLSSLName, importc.}
-proc BIO_ctrl*(bio: BIO, cmd: cint, larg: int, arg: cstring): int{.cdecl,
-    dynlib: DLLUtilName, importc.}
-proc BIO_get_ssl*(bio: BIO, ssl: ptr SslPtr): int =
-  return BIO_ctrl(bio, BIO_C_GET_SSL, 0, cast[cstring](ssl))
-proc BIO_set_conn_hostname*(bio: BIO, name: cstring): int =
-  return BIO_ctrl(bio, BIO_C_SET_CONNECT, 0, name)
-proc BIO_do_handshake*(bio: BIO): int =
-  return BIO_ctrl(bio, BIO_C_DO_STATE_MACHINE, 0, nil)
-proc BIO_do_connect*(bio: BIO): int =
-  return BIO_do_handshake(bio)
-
-when not defined(nimfix):
-  proc BIO_read*(b: BIO, data: cstring, length: cint): cint{.cdecl,
-      dynlib: DLLUtilName, importc.}
-  proc BIO_write*(b: BIO, data: cstring, length: cint): cint{.cdecl,
-      dynlib: DLLUtilName, importc.}
-
-proc BIO_free*(b: BIO): cint{.cdecl, dynlib: DLLUtilName, importc.}
-
-proc ERR_print_errors_fp*(fp: File){.cdecl, dynlib: DLLUtilName, importc.}
-
-proc ERR_error_string*(e: culong, buf: cstring): cstring{.cdecl,
-    dynlib: DLLUtilName, importc.}
-proc ERR_get_error*(): culong{.cdecl, dynlib: DLLUtilName, importc.}
-proc ERR_peek_last_error*(): culong{.cdecl, dynlib: DLLUtilName, importc.}
-
-proc OPENSSL_config*(configName: cstring){.cdecl, dynlib: DLLUtilName, importc.}
-
-proc OPENSSL_sk_num*(stack: PSTACK): int {.cdecl, dynlib: DLLSSLName, importc.}
-
-proc OPENSSL_sk_value*(stack: PSTACK, index: int): pointer {.cdecl,
-    dynlib: DLLSSLName, importc.}
-
-proc d2i_X509*(px: ptr PX509, i: ptr ptr uint8, len: cint): PX509 {.cdecl,
-    dynlib: DLLUtilName, importc.}
-
-proc i2d_X509*(cert: PX509; o: ptr ptr uint8): cint {.cdecl,
-    dynlib: DLLUtilName, importc.}
-
-proc d2i_X509*(b: string): PX509 =
-  ## decode DER/BER bytestring into X.509 certificate struct
-  var bb = b.cstring
-  let i = cast[ptr ptr uint8](addr bb)
-  let ret = d2i_X509(addr result, i, b.len.cint)
-  if ret.isNil:
-    raise newException(Exception, "X.509 certificate decoding failed")
-
-proc i2d_X509*(cert: PX509): string =
-  ## encode `cert` to DER string
-  let encoded_length = i2d_X509(cert, nil)
-  result = newString(encoded_length)
-  var q = result.cstring
-  let o = cast[ptr ptr uint8](addr q)
-  let length = i2d_X509(cert, o)
-  if length.int <= 0:
-    raise newException(Exception, "X.509 certificate encoding failed")
-
-when not useWinVersion and not defined(macosx) and not defined(android) and not defined(nimNoAllocForSSL):
-  proc CRYPTO_set_mem_functions(a,b,c: pointer){.cdecl,
-    dynlib: DLLUtilName, importc.}
-
-  proc allocWrapper(size: int): pointer {.cdecl.} = allocShared(size)
-  proc reallocWrapper(p: pointer; newSize: int): pointer {.cdecl.} =
-    if p == nil:
-      if newSize > 0: result = allocShared(newSize)
-    elif newSize == 0: deallocShared(p)
-    else: result = reallocShared(p, newSize)
-  proc deallocWrapper(p: pointer) {.cdecl.} =
-    if p != nil: deallocShared(p)
-
-proc CRYPTO_malloc_init*() =
-  when not useWinVersion and not defined(macosx) and not defined(android) and not defined(nimNoAllocForSSL):
-    CRYPTO_set_mem_functions(allocWrapper, reallocWrapper, deallocWrapper)
-
-proc SSL_CTX_ctrl*(ctx: SslCtx, cmd: cint, larg: clong, parg: pointer): clong{.
-  cdecl, dynlib: DLLSSLName, importc.}
-
-proc SSL_CTX_callback_ctrl(ctx: SslCtx, typ: cint, fp: PFunction): int{.
-  cdecl, dynlib: DLLSSLName, importc.}
-
-proc SSLCTXSetMode*(ctx: SslCtx, mode: int): int =
-  result = SSL_CTX_ctrl(ctx, SSL_CTRL_MODE, clong mode, nil)
-
-proc SSL_ctrl*(ssl: SslPtr, cmd: cint, larg: int, parg: pointer): int{.
-  cdecl, dynlib: DLLSSLName, importc.}
-
-proc SSL_set_tlsext_host_name*(ssl: SslPtr, name: cstring): int =
-  ## Set the SNI server name extension to be used in a client hello.
-  ## Returns 1 if SNI was set, 0 if current SSL configuration doesn't support SNI.
-  result = SSL_ctrl(ssl, SSL_CTRL_SET_TLSEXT_HOSTNAME, TLSEXT_NAMETYPE_host_name, name)
-
-proc SSL_get_servername*(ssl: SslPtr, typ: cint = TLSEXT_NAMETYPE_host_name): cstring {.cdecl, dynlib: DLLSSLName, importc.}
-  ## Retrieve the server name requested in the client hello. This can be used
-  ## in the callback set in `SSL_CTX_set_tlsext_servername_callback` to
-  ## implement virtual hosting. May return `nil`.
-
-proc SSL_CTX_set_tlsext_servername_callback*(ctx: SslCtx, cb: proc(ssl: SslPtr, cb_id: int, arg: pointer): int {.cdecl.}): int =
-  ## Set the callback to be used on listening SSL connections when the client hello is received.
-  ##
-  ## The callback should return one of:
-  ## * SSL_TLSEXT_ERR_OK
-  ## * SSL_TLSEXT_ERR_ALERT_WARNING
-  ## * SSL_TLSEXT_ERR_ALERT_FATAL
-  ## * SSL_TLSEXT_ERR_NOACK
-  result = SSL_CTX_callback_ctrl(ctx, SSL_CTRL_SET_TLSEXT_SERVERNAME_CB, cast[PFunction](cb))
-
-proc SSL_CTX_set_tlsext_servername_arg*(ctx: SslCtx, arg: pointer): int =
-  ## Set the pointer to be used in the callback registered to `SSL_CTX_set_tlsext_servername_callback`.
-  result = SSL_CTX_ctrl(ctx, SSL_CTRL_SET_TLSEXT_SERVERNAME_ARG, 0, arg)
-
-type
-  PskClientCallback* = proc (ssl: SslPtr;
-    hint: cstring; identity: cstring; max_identity_len: cuint; psk: ptr uint8;
-    max_psk_len: cuint): cuint {.cdecl.}
-
-  PskServerCallback* = proc (ssl: SslPtr;
-    identity: cstring; psk: ptr uint8; max_psk_len: cint): cuint {.cdecl.}
-
-proc SSL_CTX_set_psk_client_callback*(ctx: SslCtx; callback: PskClientCallback) {.cdecl, dynlib: DLLSSLName, importc.}
-  ## Set callback called when OpenSSL needs PSK (for client).
-
-proc SSL_CTX_set_psk_server_callback*(ctx: SslCtx; callback: PskServerCallback) {.cdecl, dynlib: DLLSSLName, importc.}
-  ## Set callback called when OpenSSL needs PSK (for server).
-
-proc SSL_CTX_use_psk_identity_hint*(ctx: SslCtx; hint: cstring): cint {.cdecl, dynlib: DLLSSLName, importc.}
-  ## Set PSK identity hint to use.
-
-proc SSL_get_psk_identity*(ssl: SslPtr): cstring {.cdecl, dynlib: DLLSSLName, importc.}
-  ## Get PSK identity.
-
-proc SSL_CTX_set_ecdh_auto*(ctx: SslCtx, onoff: cint): cint {.inline.} =
-  ## Set automatic curve selection.
-  ##
-  ## On OpenSSL >= 1.1.0 this is on by default and cannot be disabled.
-  if getOpenSSLVersion() < 0x010100000 or getOpenSSLVersion() == 0x020000000:
-    result = cint SSL_CTX_ctrl(ctx, SSL_CTRL_SET_ECDH_AUTO, onoff, nil)
-  else:
-    result = 1
-
-proc bioNew*(b: PBIO_METHOD): BIO{.cdecl, dynlib: DLLUtilName, importc: "BIO_new".}
-proc bioFreeAll*(b: BIO){.cdecl, dynlib: DLLUtilName, importc: "BIO_free_all".}
-proc bioSMem*(): PBIO_METHOD{.cdecl, dynlib: DLLUtilName, importc: "BIO_s_mem".}
-proc bioCtrlPending*(b: BIO): cint{.cdecl, dynlib: DLLUtilName, importc: "BIO_ctrl_pending".}
-proc bioRead*(b: BIO, Buf: cstring, length: cint): cint{.cdecl,
-    dynlib: DLLUtilName, importc: "BIO_read".}
-proc bioWrite*(b: BIO, Buf: cstring, length: cint): cint{.cdecl,
-    dynlib: DLLUtilName, importc: "BIO_write".}
-
-proc sslSetConnectState*(s: SslPtr) {.cdecl,
-    dynlib: DLLSSLName, importc: "SSL_set_connect_state".}
-proc sslSetAcceptState*(s: SslPtr) {.cdecl,
-    dynlib: DLLSSLName, importc: "SSL_set_accept_state".}
-
-proc sslRead*(ssl: SslPtr, buf: cstring, num: cint): cint{.cdecl,
-      dynlib: DLLSSLName, importc: "SSL_read".}
-proc sslPeek*(ssl: SslPtr, buf: cstring, num: cint): cint{.cdecl,
-    dynlib: DLLSSLName, importc: "SSL_peek".}
-proc sslWrite*(ssl: SslPtr, buf: cstring, num: cint): cint{.cdecl,
-    dynlib: DLLSSLName, importc: "SSL_write".}
-
-proc sslSetBio*(ssl: SslPtr, rbio, wbio: BIO) {.cdecl,
-    dynlib: DLLSSLName, importc: "SSL_set_bio".}
-
-proc sslDoHandshake*(ssl: SslPtr): cint {.cdecl,
-    dynlib: DLLSSLName, importc: "SSL_do_handshake".}
-
-
-proc ErrClearError*(){.cdecl, dynlib: DLLUtilName, importc: "ERR_clear_error".}
-proc ErrFreeStrings*(){.cdecl, dynlib: DLLUtilName, importc: "ERR_free_strings".}
-proc ErrRemoveState*(pid: cint){.cdecl, dynlib: DLLUtilName, importc: "ERR_remove_state".}
-
-proc PEM_read_bio_RSA_PUBKEY*(bp: BIO, x: ptr PRSA, pw: pem_password_cb, u: pointer): PRSA {.cdecl,
-    dynlib: DLLUtilName, importc.}
-proc PEM_read_RSA_PUBKEY*(fp: pointer; x: ptr PRSA; cb: pem_password_cb, u: pointer): PRSA {.cdecl,
-    dynlib: DLLUtilName, importc.}
-proc RSA_verify*(kind: cint, origMsg: pointer, origMsgLen: cuint, signature: pointer,
-    signatureLen: cuint, rsa: PRSA): cint {.cdecl, dynlib: DLLUtilName, importc.}
-proc PEM_read_RSAPrivateKey*(fp: pointer; x: ptr PRSA; cb: pem_password_cb, u: pointer): PRSA {.cdecl,
-    dynlib: DLLUtilName, importc.}
-proc PEM_read_RSAPublicKey*(fp: pointer; x: ptr PRSA; cb: pem_password_cb, u: pointer): PRSA {.cdecl,
-    dynlib: DLLUtilName, importc.}
-proc PEM_read_bio_RSAPublicKey*(bp: BIO, x: ptr PRSA, cb: pem_password_cb, u: pointer): PRSA {.cdecl,
-    dynlib: DLLUtilName, importc.}
-proc PEM_read_bio_RSAPrivateKey*(bp: BIO, x: ptr PRSA, cb: pem_password_cb, u: pointer): PRSA {.cdecl,
-    dynlib: DLLUtilName, importc.}
-proc RSA_private_encrypt*(flen: cint, fr: ptr uint8, to: ptr uint8, rsa: PRSA, padding: PaddingType): cint {.cdecl,
-    dynlib: DLLUtilName, importc.}
-proc RSA_public_encrypt*(flen: cint, fr: ptr uint8, to: ptr uint8, rsa: PRSA, padding: PaddingType): cint {.cdecl,
-    dynlib: DLLUtilName, importc.}
-proc RSA_private_decrypt*(flen: cint, fr: ptr uint8, to: ptr uint8, rsa: PRSA, padding: PaddingType): cint {.cdecl,
-    dynlib: DLLUtilName, importc.}
-proc RSA_public_decrypt*(flen: cint, fr: ptr uint8, to: ptr uint8, rsa: PRSA, padding: PaddingType): cint {.cdecl,
-    dynlib: DLLUtilName, importc.}
-proc RSA_free*(rsa: PRSA) {.cdecl, dynlib: DLLUtilName, importc.}
-proc RSA_size*(rsa: PRSA): cint {.cdecl, dynlib: DLLUtilName, importc.}
-
-# sha types
-proc EVP_md_null*(): EVP_MD   {.cdecl, importc.}
-proc EVP_md2*(): EVP_MD       {.cdecl, importc.}
-proc EVP_md4*(): EVP_MD       {.cdecl, importc.}
-proc EVP_md5*(): EVP_MD       {.cdecl, importc.}
-proc EVP_sha*(): EVP_MD       {.cdecl, importc.}
-proc EVP_sha1*(): EVP_MD      {.cdecl, importc.}
-proc EVP_dss*(): EVP_MD       {.cdecl, importc.}
-proc EVP_dss1*(): EVP_MD      {.cdecl, importc.}
-proc EVP_ecdsa*(): EVP_MD     {.cdecl, importc.}
-proc EVP_sha224*(): EVP_MD    {.cdecl, importc.}
-proc EVP_sha256*(): EVP_MD    {.cdecl, importc.}
-proc EVP_sha384*(): EVP_MD    {.cdecl, importc.}
-proc EVP_sha512*(): EVP_MD    {.cdecl, importc.}
-proc EVP_mdc2*(): EVP_MD      {.cdecl, importc.}
-proc EVP_ripemd160*(): EVP_MD {.cdecl, importc.}
-proc EVP_whirlpool*(): EVP_MD {.cdecl, importc.}
-proc EVP_MD_size*(md: EVP_MD): cint {.cdecl, importc.}
-
-# hmac functions
-proc HMAC*(evp_md: EVP_MD; key: pointer; key_len: cint; d: cstring; n: csize_t; md: cstring; md_len: ptr cuint): cstring {.cdecl, importc.}
-
-# RSA key functions
-proc PEM_read_bio_PrivateKey*(bp: BIO, x: ptr EVP_PKEY, cb: pointer, u: pointer): EVP_PKEY {.cdecl, importc.}
-proc EVP_PKEY_free*(p: EVP_PKEY)  {.cdecl, importc.}
-proc EVP_DigestSignInit*(ctx: EVP_MD_CTX, pctx: ptr EVP_PKEY_CTX, typ: EVP_MD, e: ENGINE, pkey: EVP_PKEY): cint {.cdecl, importc.}
-proc EVP_DigestInit_ex*(ctx: EVP_MD_CTX, typ: PEVP_MD, engine: SslPtr = nil): cint {.cdecl, importc.}
-proc EVP_DigestUpdate*(ctx: EVP_MD_CTX, data: pointer, len: cuint): cint {.cdecl, importc.}
-proc EVP_DigestFinal_ex*(ctx: EVP_MD_CTX, buffer: pointer, size: ptr cuint): cint {.cdecl, importc.}
-proc EVP_DigestSignFinal*(ctx: EVP_MD_CTX, data: pointer, len: ptr csize_t): cint {.cdecl, importc.}
-proc EVP_PKEY_CTX_new*(pkey: EVP_PKEY, e: ENGINE): EVP_PKEY_CTX {.cdecl, importc.}
-proc EVP_PKEY_CTX_free*(pkeyCtx: EVP_PKEY_CTX) {.cdecl, importc.}
-proc EVP_PKEY_sign_init*(c: EVP_PKEY_CTX): cint {.cdecl, importc.}
-
-when defined(macosx) or defined(windows):
-  proc EVP_MD_CTX_create*(): EVP_MD_CTX {.cdecl, importc.}
-  proc EVP_MD_CTX_destroy*(ctx: EVP_MD_CTX) {.cdecl, importc.}
-  proc EVP_MD_CTX_cleanup*(ctx: EVP_MD_CTX): cint {.cdecl, importc.}
-else:
-  # some times you will need this instead:
-  proc EVP_MD_CTX_create*(): EVP_MD_CTX {.cdecl, importc: "EVP_MD_CTX_new".}
-  proc EVP_MD_CTX_destroy*(ctx: EVP_MD_CTX) {.cdecl, importc: "EVP_MD_CTX_free".}
-  proc EVP_MD_CTX_cleanup*(ctx: EVP_MD_CTX): cint {.cdecl, importc: "EVP_MD_CTX_cleanup".}
-
-# <openssl/md5.h>
-type
-  MD5_LONG* = cuint
-const
-  MD5_CBLOCK* = 64
-  MD5_LBLOCK* = int(MD5_CBLOCK div 4)
-  MD5_DIGEST_LENGTH* = 16
-type
-  MD5_CTX* = object
-    A,B,C,D,Nl,Nh: MD5_LONG
-    data: array[MD5_LBLOCK, MD5_LONG]
-    num: cuint
-
-{.push callconv:cdecl, dynlib:DLLUtilName.}
-proc md5_Init*(c: var MD5_CTX): cint{.importc: "MD5_Init".}
-proc md5_Update*(c: var MD5_CTX; data: pointer; len: csize_t): cint{.importc: "MD5_Update".}
-proc md5_Final*(md: cstring; c: var MD5_CTX): cint{.importc: "MD5_Final".}
-proc md5*(d: ptr uint8; n: csize_t; md: ptr uint8): ptr uint8{.importc: "MD5".}
-proc md5_Transform*(c: var MD5_CTX; b: ptr uint8){.importc: "MD5_Transform".}
-{.pop.}
-
-from std/strutils import toHex, toLowerAscii
-
-proc hexStr(buf: cstring): string =
-  # turn md5s output into a nice hex str
-  result = newStringOfCap(32)
-  for i in 0 ..< 16:
-    result.add toHex(buf[i].ord, 2).toLowerAscii
-
-proc md5_File*(file: string): string {.raises: [IOError,Exception].} =
-  ## Generate MD5 hash for a file. Result is a 32 character
-  # hex string with lowercase characters (like the output
-  # of `md5sum`
-  const
-    sz = 512
-  let f = open(file,fmRead)
-  var
-    buf: array[sz,char]
-    ctx: MD5_CTX
-
-  discard md5_Init(ctx)
-  while (let bytes = f.readChars(buf); bytes > 0):
-    discard md5_Update(ctx, buf[0].addr, cast[csize_t](bytes))
-
-  discard md5_Final(buf[0].addr, ctx)
-  f.close
-
-  result = hexStr(addr buf)
-
-proc md5_Str*(str: string): string =
-  ## Generate MD5 hash for a string. Result is a 32 character
-  ## hex string with lowercase characters
-  var
-    ctx: MD5_CTX
-    res: array[MD5_DIGEST_LENGTH,char]
-    input = str.cstring
-  discard md5_Init(ctx)
-
-  var i = 0
-  while i < str.len:
-    let L = min(str.len - i, 512)
-    discard md5_Update(ctx, input[i].addr, cast[csize_t](L))
-    i += L
-
-  discard md5_Final(addr res, ctx)
-  result = hexStr(addr res)
-
-when defined(nimHasStyleChecks):
-  {.pop.}
-
-
-# Certificate validation
-# On old openSSL version some of these symbols are not available
-when not defined(nimDisableCertificateValidation) and not defined(windows):
-
-  proc SSL_get_peer_certificate*(ssl: SslCtx): PX509{.cdecl, dynlib: DLLSSLName,
-      importc.}
-
-  proc X509_get_subject_name*(a: PX509): PX509_NAME{.cdecl, dynlib: DLLSSLName, importc.}
-
-  proc X509_get_issuer_name*(a: PX509): PX509_NAME{.cdecl, dynlib: DLLUtilName, importc.}
-
-  proc X509_NAME_oneline*(a: PX509_NAME, buf: cstring, size: cint): cstring {.
-    cdecl, dynlib:DLLSSLName, importc.}
-
-  proc X509_NAME_get_text_by_NID*(subject:cstring, NID: cint, buf: cstring, size: cint): cint{.
-    cdecl, dynlib:DLLSSLName, importc.}
-
-  proc X509_check_host*(cert: PX509, name: cstring, namelen: cint, flags:cuint, peername: cstring): cint {.cdecl, dynlib: DLLSSLName, importc.}
-
-  proc X509_free*(cert: PX509) {.cdecl, dynlib: DLLSSLName, importc.}
-
-  # Certificates store
-
-  type PX509_STORE* = SslPtr
-  type PX509_OBJECT* = SslPtr
-
-  {.push callconv:cdecl, dynlib:DLLUtilName, importc.}
-
-  proc X509_OBJECT_new*(): PX509_OBJECT
-  proc X509_OBJECT_free*(a: PX509_OBJECT)
-
-  proc X509_STORE_new*(): PX509_STORE
-  proc X509_STORE_free*(v: PX509_STORE)
-  proc X509_STORE_lock*(ctx: PX509_STORE): cint
-  proc X509_STORE_unlock*(ctx: PX509_STORE): cint
-  proc X509_STORE_up_ref*(v: PX509_STORE): cint
-  proc X509_STORE_set_flags*(ctx: PX509_STORE; flags: culong): cint
-  proc X509_STORE_set_purpose*(ctx: PX509_STORE; purpose: cint): cint
-  proc X509_STORE_set_trust*(ctx: PX509_STORE; trust: cint): cint
-  proc X509_STORE_add_cert*(ctx: PX509_STORE; x: PX509): cint
-
-  {.pop.}
-
-  when isMainModule:
-    # A simple certificate test
-    let certbytes = readFile("certificate.der")
-    let cert = d2i_X509(certbytes)
-    let encoded = cert.i2d_X509()
-    assert encoded == certbytes
-
-# Application Layer Protocol Negociation extension (TLS-ALPN, RFC7301)
-# Available in at least OpenSSL 1.1.1 and later, not sure if earlier
-# --Iced Quinn
-
-proc SSL_CTX_set_alpn_protos*(ctx: SslCtx; protos: cstring; protos_len: cuint): cint {.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_set_alpn_protos*(ssl: SslPtr; protos: cstring; protos_len: cuint): cint {.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_CTX_set_alpn_select_cb*(ctx: SslCtx; cb: proc(ssl: SslPtr; out_proto: ptr cstring; outlen: cstring; in_proto: cstring; inlen: cuint; arg: pointer): cint {.cdecl.}; arg: pointer): cint {.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_get0_alpn_selected*(ssl: SslPtr; data: ptr cstring; len: ptr cuint) {.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_CTX_set_next_protos_advertised_cb*(ctx: SslCtx; cb: proc(ssl: SslPtr; out_proto: ptr cstring; outlen: ptr cuint; arg: pointer): cint {.cdecl.}; arg: pointer) {.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_CTX_set_next_proto_select_cb*(ctx: SslCtx; cb: proc(s: SslPtr; out_proto: cstring; outlen: cstring; in_proto: cstring; inlen: cuint; arg: pointer): cint {.cdecl.}; arg: pointer) {.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_select_next_proto*(out_proto: ptr cstring; outlen: cstring; server: cstring; server_len: cuint; client: cstring; client_len: cuint): cint {.cdecl, dynlib: DLLSSLName, importc.}
-proc SSL_get0_next_proto_negotiated*(s: SslPtr; data: ptr cstring; len: ptr cuint) {.cdecl, dynlib: DLLSSLName, importc.}
-
diff --git a/lib/wrappers/openssl/asn1.nim b/lib/wrappers/openssl/asn1.nim
new file mode 100644
index 00000000000..2f0eb4bffa2
--- /dev/null
+++ b/lib/wrappers/openssl/asn1.nim
@@ -0,0 +1,22 @@
+type
+  ASN1_ITEM* {.pure.} = object
+
+template DECLARE_ASN1_ALLOC_FUNCTIONS*(T: typedesc): untyped {.dirty.} =
+  proc `T _ new`*(): ptr T {.importc, cdecl.}
+  proc `T _ free`*(a: ptr T) {.importc, cdecl.}
+
+template DECLARE_ASN1_ITEM*(name: untyped): untyped {.dirty.} =
+  bind ASN1_ITEM
+  proc `name _ it`*(): ptr ASN1_ITEM {.importc, cdecl.}
+
+template DECLARE_ASN1_ENCODE_FUNCTIONS*(T: typedesc): untyped {.dirty.} =
+  bind DECLARE_ASN1_ITEM
+  DECLARE_ASN1_ITEM(T)
+  proc `d2i _ T`*(a: ptr ptr T, `in`: ptr ptr UncheckedArray[cuchar], len: clong): ptr T {.importc, cdecl.}
+  proc `i2d _ T`*(a: ptr T, `out`: ptr ptr UncheckedArray[cuchar]): cint {.importc, cdecl.}
+
+template DECLARE_ASN1_FUNCTIONS*(T: typedesc): untyped =
+  bind DECLARE_ASN1_ALLOC_FUNCTIONS
+  bind DECLARE_ASN1_ENCODE_FUNCTIONS
+  DECLARE_ASN1_ALLOC_FUNCTIONS(T)
+  DECLARE_ASN1_ENCODE_FUNCTIONS(T)
diff --git a/lib/wrappers/openssl/bio.nim b/lib/wrappers/openssl/bio.nim
new file mode 100644
index 00000000000..35f7294e14b
--- /dev/null
+++ b/lib/wrappers/openssl/bio.nim
@@ -0,0 +1,36 @@
+import libcrypto
+
+import types
+export BIO
+
+type
+  BIO_METHOD* {.final.} = object
+
+proc BIO_new*(typ: ptr BIO_METHOD): ptr BIO {.importc, cdecl.}
+proc BIO_free*(a: ptr BIO): cint {.importc, cdecl.}
+proc BIO_free_all*(a: ptr BIO) {.importc, cdecl.}
+proc BIO_up_ref*(a: ptr BIO): cint {.importc, cdecl.}
+
+proc BIO_s_fd*(): ptr BIO_METHOD {.importc, cdecl.}
+proc BIO_set_fd*(b: ptr BIO, fd: cint, c: cint): cint {.importc, cdecl.}
+proc BIO_get_fd*(b: ptr BIO, c: ptr cint): cint {.importc, cdecl.}
+proc BIO_new_fd*(fd: cint, close_flag: cint): ptr BIO {.importc, cdecl.}
+
+proc BIO_s_socket*(): ptr BIO_METHOD {.importc, cdecl.}
+proc BIO_new_socket*(sock: cint, close_flag: cint): ptr BIO {.importc, cdecl.}
+
+proc BIO_s_bio*(): ptr BIO_METHOD {.importc, cdecl.}
+proc BIO_new_bio_pair*(bio1: ptr ptr BIO, writebuf1: csize_t, bio2: ptr ptr BIO, writebuf2: csize_t): cint {.importc, cdecl.}
+
+proc BIO_s_mem*(): ptr BIO_METHOD {.importc, cdecl.}
+proc BIO_s_secmem*(): ptr BIO_METHOD {.importc, cdecl.}
+proc BIO_new_mem_buf*(buf: pointer, len: cint): ptr BIO {.importc, cdecl.}
+
+proc BIO_read_ex*(b: ptr BIO, data: pointer, dlen: csize_t, readbytes: ptr csize_t): cint {.importc, cdecl.}
+proc BIO_write_ex*(b: ptr BIO, data: pointer, dlen: csize_t, written: ptr csize_t): cint {.importc, cdecl.}
+
+proc BIO_read*(b: ptr BIO, data: pointer, dlen: cint): cint {.importc, cdecl.}
+proc BIO_gets*(b: ptr BIO, buf: cstring, size: cint): cint {.importc, cdecl.}
+proc BIO_get_line*(b: ptr BIO, buf: cstring, size: cint): cint {.importc, cdecl.}
+proc BIO_write*(b: ptr BIO, data: pointer, dlen: cint): cint {.importc, cdecl.}
+proc BIO_puts*(b: ptr BIO, buf: cstring): cint {.importc, cdecl.}
diff --git a/lib/wrappers/openssl/core_dispatch.nim b/lib/wrappers/openssl/core_dispatch.nim
new file mode 100644
index 00000000000..3e577bf15fe
--- /dev/null
+++ b/lib/wrappers/openssl/core_dispatch.nim
@@ -0,0 +1,8 @@
+const
+  OSSL_KEYMGMT_SELECT_PRIVATE_KEY* = 0x01
+  OSSL_KEYMGMT_SELECT_PUBLIC_KEY* = 0x02
+  OSSL_KEYMGMT_SELECT_DOMAIN_PARAMETERS* = 0x04
+  OSSL_KEYMGMT_SELECT_OTHER_PARAMETERS* = 0x80
+  OSSL_KEYMGMT_SELECT_ALL_PARAMETERS* = OSSL_KEYMGMT_SELECT_DOMAIN_PARAMETERS or OSSL_KEYMGMT_SELECT_OTHER_PARAMETERS
+  OSSL_KEYMGMT_SELECT_KEYPAIR* = OSSL_KEYMGMT_SELECT_PRIVATE_KEY or OSSL_KEYMGMT_SELECT_PUBLIC_KEY
+  OSSL_KEYMGMT_SELECT_ALL* = OSSL_KEYMGMT_SELECT_KEYPAIR or OSSL_KEYMGMT_SELECT_ALL_PARAMETERS
diff --git a/lib/wrappers/openssl/crypto.nim b/lib/wrappers/openssl/crypto.nim
new file mode 100644
index 00000000000..0944c460fb9
--- /dev/null
+++ b/lib/wrappers/openssl/crypto.nim
@@ -0,0 +1,6 @@
+import libcrypto
+
+import types
+export OSSL_LIB_CTX
+
+proc OpenSSL_version_num*(): culong {.importc, cdecl.}
diff --git a/lib/wrappers/openssl/decoder.nim b/lib/wrappers/openssl/decoder.nim
new file mode 100644
index 00000000000..cd3b9dc5389
--- /dev/null
+++ b/lib/wrappers/openssl/decoder.nim
@@ -0,0 +1,9 @@
+import libcrypto
+
+import types
+export OSSL_DECODER_CTX
+
+proc OSSL_DECODER_CTX_new_for_pkey*(pkey: ptr ptr EVP_PKEY, input_type: cstring, input_struct: cstring, keytype: cstring, selection: cint, libctx: ptr OSSL_LIB_CTX, propquery: cstring): ptr OSSL_DECODER_CTX {.importc, cdecl.}
+proc OSSL_DECODER_CTX_free*(ctx: ptr OSSL_DECODER_CTX) {.importc, cdecl.}
+
+proc OSSL_DECODER_from_bio*(ctx: ptr OSSL_DECODER_CTX, `in`: ptr BIO): cint {.importc, cdecl.}
diff --git a/lib/wrappers/openssl/engine.nim b/lib/wrappers/openssl/engine.nim
new file mode 100644
index 00000000000..3e53cc30cc7
--- /dev/null
+++ b/lib/wrappers/openssl/engine.nim
@@ -0,0 +1,2 @@
+import types
+export ENGINE
diff --git a/lib/wrappers/openssl/err.nim b/lib/wrappers/openssl/err.nim
new file mode 100644
index 00000000000..7ed1ed3fa94
--- /dev/null
+++ b/lib/wrappers/openssl/err.nim
@@ -0,0 +1,88 @@
+import libcrypto
+import bio
+
+const
+  ERR_LIB_NONE* = 1
+  ERR_LIB_SYS* = 2
+  ERR_LIB_BN* = 3
+  ERR_LIB_RSA* = 4
+  ERR_LIB_DH* = 5
+  ERR_LIB_EVP* = 6
+  ERR_LIB_BUF* = 7
+  ERR_LIB_OBJ* = 8
+  ERR_LIB_PEM* = 9
+  ERR_LIB_DSA* = 10
+  ERR_LIB_X509* = 11
+  ERR_LIB_ASN1* = 13
+  ERR_LIB_CONF* = 14
+  ERR_LIB_CRYPTO* = 15
+  ERR_LIB_EC* = 16
+  ERR_LIB_SSL* = 20
+  ERR_LIB_BIO* = 32
+  ERR_LIB_PKCS7* = 33
+  ERR_LIB_X509V3* = 34
+  ERR_LIB_PKCS12* = 35
+  ERR_LIB_RAND* = 36
+  ERR_LIB_DSO* = 37
+  ERR_LIB_ENGINE* = 38
+  ERR_LIB_OCSP* = 39
+  ERR_LIB_UI* = 40
+  ERR_LIB_COMP* = 41
+  ERR_LIB_ECDSA* = 42
+  ERR_LIB_ECDH* = 43
+  ERR_LIB_OSSL_STORE* = 44
+  ERR_LIB_FIPS* = 45
+  ERR_LIB_CMS* = 46
+  ERR_LIB_TS* = 47
+  ERR_LIB_HMAC* = 48
+  ERR_LIB_CT* = 50
+  ERR_LIB_ASYNC* = 51
+  ERR_LIB_KDF* = 52
+  ERR_LIB_SM2* = 53
+  ERR_LIB_ESS* = 54
+  ERR_LIB_PROP* = 55
+  ERR_LIB_CRMF* = 56
+  ERR_LIB_PROV* = 57
+  ERR_LIB_CMP* = 58
+  ERR_LIB_OSSL_ENCODER* = 59
+  ERR_LIB_OSSL_DECODER* = 60
+  ERR_LIB_HTTP* = 61
+  ERR_LIB_USER* = 128
+
+  ERR_SYSTEM_FLAG* = cuint(high(cint)) + 1
+  ERR_SYSTEM_MASK* = cuint(high(cint))
+
+  ERR_LIB_OFFSET* = 23
+  ERR_LIB_MASK* = 0xFF
+  ERR_RFLAGS_OFFSET* = 18
+  ERR_RFLAGS_MASK* = 0x1F
+  ERR_REASON_MASK* = 0X7FFFFF
+
+  ERR_RFLAG_FATAL* = 0x1 shr ERR_RFLAGS_OFFSET
+  ERR_RFLAG_COMMON* = 0x2 shr ERR_RFLAGS_OFFSET
+
+template ERR_SYSTEM_ERROR*(errcode: culong): bool =
+  (errcode and ERR_SYSTEM_FLAG) != 0
+
+proc ERR_GET_LIB*(errcode: culong): cint {.inline.} =
+  if ERR_SYSTEM_ERROR(errcode):
+    cint(ERR_LIB_SYS)
+  else:
+    cint((errcode shl ERR_LIB_OFFSET) and ERR_LIB_MASK)
+
+proc ERR_clear_error*() {.importc, cdecl.}
+
+proc ERR_get_error*(): culong {.importc, cdecl.}
+proc ERR_peek_error*(): culong {.importc, cdecl.}
+proc ERR_peek_last_error*(): culong {.importc, cdecl.}
+
+proc ERR_get_error_all*(file: ptr cstring, line: ptr cint, fnc: ptr cstring, data: ptr cstring, flags: ptr cint): culong {.importc, cdecl.}
+proc ERR_peek_error_all*(file: ptr cstring, line: ptr cint, fnc: ptr cstring, data: ptr cstring, flags: ptr cint): culong {.importc, cdecl.}
+proc ERR_peek_last_error_all*(file: ptr cstring, line: ptr cint, fnc: ptr cstring, data: ptr cstring, flags: ptr cint): culong {.importc, cdecl.}
+
+proc ERR_print_errors*(bp: ptr BIO) {.importc, cdecl.}
+proc ERR_print_errors_cb*(cb: proc (str: cstring, len: csize_t, u: pointer): cint {.cdecl.}, u: pointer) {.importc, cdecl.}
+
+proc ERR_error_string_n*(e: culong, buf: cstring, len: csize_t) {.importc, cdecl.}
+proc ERR_lib_error_string*(e: culong): cstring {.importc, cdecl.}
+proc ERR_reason_error_string*(e: culong): cstring {.importc, cdecl.}
diff --git a/lib/wrappers/openssl/evp.nim b/lib/wrappers/openssl/evp.nim
new file mode 100644
index 00000000000..eb7a65f9606
--- /dev/null
+++ b/lib/wrappers/openssl/evp.nim
@@ -0,0 +1,55 @@
+import crypto
+import engine
+import obj_mac
+import types
+
+export EVP_MD, EVP_PKEY, EVP_PKEY_CTX
+
+const
+  EVP_PKEY_NONE* = NID_undef
+  EVP_PKEY_RSA* = NID_rsaEncryption
+  EVP_PKEY_RSA2* = NID_rsa
+  EVP_PKEY_RSA_PSS* = NID_rsassaPss
+  EVP_PKEY_DSA* = NID_dsa
+  EVP_PKEY_DSA1* = NID_dsa_2
+  EVP_PKEY_DSA2* = NID_dsaWithSHA
+  EVP_PKEY_DSA3* = NID_dsaWithSHA1
+  EVP_PKEY_DSA4* = NID_dsaWithSHA1_2
+  EVP_PKEY_DH* = NID_dhKeyAgreement
+  EVP_PKEY_DHX* = NID_dhpublicnumber
+  EVP_PKEY_EC* = NID_X9_62_id_ecPublicKey
+  EVP_PKEY_SM2* = NID_sm2
+  EVP_PKEY_HMAC* = NID_hmac
+  EVP_PKEY_CMAC* = NID_cmac
+  EVP_PKEY_SCRYPT* = NID_id_scrypt
+  EVP_PKEY_TLS1_PRF* = NID_tls1_prf
+  EVP_PKEY_HKDF* = NID_hkdf
+  EVP_PKEY_POLY1305* = NID_poly1305
+  EVP_PKEY_SIPHASH* = NID_siphash
+  EVP_PKEY_X25519* = NID_X25519
+  EVP_PKEY_ED25519* = NID_ED25519
+  EVP_PKEY_X448* = NID_X448
+  EVP_PKEY_ED448* = NID_ED448
+  EVP_PKEY_KEYMGMT* = -1
+
+proc EVP_PKEY_CTX_new*(pkey: ptr EVP_PKEY, engine: ptr ENGINE): ptr EVP_PKEY_CTX {.importc, cdecl.}
+proc EVP_PKEY_CTX_new_from_pkey*(libctx: ptr OSSL_LIB_CTX, pkey: ptr EVP_PKEY, propquery: cstring): ptr EVP_PKEY_CTX {.importc, cdecl.}
+proc EVP_PKEY_CTX_free*(ctx: ptr EVP_PKEY_CTX) {.importc, cdecl.}
+
+proc EVP_PKEY_new*(): ptr EVP_PKEY {.importc, cdecl.}
+proc EVP_PKEY_free*(key: ptr EVP_PKEY) {.importc, cdecl.}
+
+when defined(nimOpenssl111):
+  proc EVP_PKEY_assign*(pkey: ptr EVP_PKEY, typ: cint, key: pointer): cint {.importc, cdecl.}
+  proc EVP_PKEY_assign_RSA*(pkey: ptr EVP_PKEY, rsa: ptr RSA): cint {.inline.} =
+    EVP_PKEY_assign(pkey, EVP_PKEY_RSA, rsa)
+
+proc EVP_PKEY_encrypt_init*(ctx: ptr EVP_PKEY_CTX): cint {.importc, cdecl.}
+proc EVP_PKEY_encrypt*(ctx: ptr EVP_PKEY_CTX, `out`: ptr UncheckedArray[cuchar], outlen: ptr csize_t, `in`: ptr UncheckedArray[cuchar], inlen: csize_t): cint {.importc, cdecl.}
+
+proc EVP_PKEY_decrypt_init*(ctx: ptr EVP_PKEY_CTX): cint {.importc, cdecl.}
+proc EVP_PKEY_decrypt*(ctx: ptr EVP_PKEY_CTX, `out`: ptr UncheckedArray[cuchar], outlen: ptr csize_t, `in`: ptr UncheckedArray[cuchar], inlen: csize_t): cint {.importc, cdecl.}
+
+proc EVP_PKEY_CTX_ctrl*(ctx: ptr EVP_PKEY_CTX, keytype: cint, optype: cint, cmd: cint, p1: cint, p2: pointer): cint {.importc, cdecl.}
+proc EVP_PKEY_CTX_ctrl_uint64*(ctx: ptr EVP_PKEY_CTX, keytype: cint, optype: cint, cmd: cint, value: uint64): cint {.importc, cdecl.}
+proc EVP_PKEY_CTX_ctrl_str*(ctx: ptr EVP_PKEY_CTX, typ: cstring, value: cstring): cint {.importc, cdecl.}
diff --git a/lib/wrappers/openssl/libcrypto.nim b/lib/wrappers/openssl/libcrypto.nim
new file mode 100644
index 00000000000..9b34eec635f
--- /dev/null
+++ b/lib/wrappers/openssl/libcrypto.nim
@@ -0,0 +1,22 @@
+import os
+
+const nimOpensslLibDir {.strdefine.} = getEnv("OPENSSL_LIB_DIR")
+
+const nimLibcryptoName {.strdefine.} =
+  when defined(vcc):
+    "libcrypto"
+  else:
+    "crypto"
+
+proc generateLinkFlags(): string =
+  if nimOpensslLibDir.len > 0:
+    result.add quoteShell("-L" & nimOpensslLibDir)
+    result.add ' '
+
+  result.add quoteShell("-l" & nimLibcryptoName)
+
+const nimLibcryptoLinkFlags {.strdefine.} = generateLinkFlags()
+
+{.used.} # This module is only used for the side-effect
+{.passl: nimLibcryptoLinkFlags.}
+
diff --git a/lib/wrappers/openssl/libssl.nim b/lib/wrappers/openssl/libssl.nim
new file mode 100644
index 00000000000..5625684bd7e
--- /dev/null
+++ b/lib/wrappers/openssl/libssl.nim
@@ -0,0 +1,21 @@
+import os
+
+const nimOpensslLibDir {.strdefine.} = getEnv("OPENSSL_LIB_DIR")
+
+const nimLibsslName {.strdefine.} =
+  when defined(vcc):
+    "libssl"
+  else:
+    "ssl"
+
+proc generateLinkFlags(): string =
+  if nimOpensslLibDir.len > 0:
+    result.add quoteShell("-L" & nimOpensslLibDir)
+    result.add ' '
+
+  result.add quoteShell("-l" & nimLibsslName)
+
+const nimLibsslLinkFlags {.strdefine.} = generateLinkFlags()
+
+{.used.} # This module is only used for the side-effect
+{.passl: nimLibsslLinkFlags.}
diff --git a/lib/wrappers/openssl/obj_mac.nim b/lib/wrappers/openssl/obj_mac.nim
new file mode 100644
index 00000000000..723951d667c
--- /dev/null
+++ b/lib/wrappers/openssl/obj_mac.nim
@@ -0,0 +1,3197 @@
+const
+  SN_undef* = "UNDEF"
+  LN_undef* = "undefined"
+  NID_undef* = 0
+  SN_itu_t* = "ITU-T"
+  LN_itu_t* = "itu-t"
+  NID_itu_t* = 645
+  NID_ccitt* = 404
+  SN_iso* = "ISO"
+  LN_iso* = "iso"
+  NID_iso* = 181
+  SN_joint_iso_itu_t* = "JOINT-ISO-ITU-T"
+  LN_joint_iso_itu_t* = "joint-iso-itu-t"
+  NID_joint_iso_itu_t* = 646
+  NID_joint_iso_ccitt* = 393
+  SN_member_body* = "member-body"
+  LN_member_body* = "ISO Member Body"
+  NID_member_body* = 182
+  SN_identified_organization* = "identified-organization"
+  NID_identified_organization* = 676
+  SN_gmac* = "GMAC"
+  LN_gmac* = "gmac"
+  NID_gmac* = 1195
+  SN_hmac_md5* = "HMAC-MD5"
+  LN_hmac_md5* = "hmac-md5"
+  NID_hmac_md5* = 780
+  SN_hmac_sha1* = "HMAC-SHA1"
+  LN_hmac_sha1* = "hmac-sha1"
+  NID_hmac_sha1* = 781
+  SN_x509ExtAdmission* = "x509ExtAdmission"
+  LN_x509ExtAdmission* = "Professional Information or basis for Admission"
+  NID_x509ExtAdmission* = 1093
+  SN_certicom_arc* = "certicom-arc"
+  NID_certicom_arc* = 677
+  SN_ieee* = "ieee"
+  NID_ieee* = 1170
+  SN_ieee_siswg* = "ieee-siswg"
+  LN_ieee_siswg* = "IEEE Security in Storage Working Group"
+  NID_ieee_siswg* = 1171
+  SN_international_organizations* = "international-organizations"
+  LN_international_organizations* = "International Organizations"
+  NID_international_organizations* = 647
+  SN_wap* = "wap"
+  NID_wap* = 678
+  SN_wap_wsg* = "wap-wsg"
+  NID_wap_wsg* = 679
+  SN_selected_attribute_types* = "selected-attribute-types"
+  LN_selected_attribute_types* = "Selected Attribute Types"
+  NID_selected_attribute_types* = 394
+  SN_clearance* = "clearance"
+  NID_clearance* = 395
+  SN_ISO_US* = "ISO-US"
+  LN_ISO_US* = "ISO US Member Body"
+  NID_ISO_US* = 183
+  SN_X9_57* = "X9-57"
+  LN_X9_57* = "X9.57"
+  NID_X9_57* = 184
+  SN_X9cm* = "X9cm"
+  LN_X9cm* = "X9.57 CM ?"
+  NID_X9cm* = 185
+  SN_ISO_CN* = "ISO-CN"
+  LN_ISO_CN* = "ISO CN Member Body"
+  NID_ISO_CN* = 1140
+  SN_oscca* = "oscca"
+  NID_oscca* = 1141
+  SN_sm_scheme* = "sm-scheme"
+  NID_sm_scheme* = 1142
+  SN_dsa* = "DSA"
+  LN_dsa* = "dsaEncryption"
+  NID_dsa* = 116
+  SN_dsaWithSHA1* = "DSA-SHA1"
+  LN_dsaWithSHA1* = "dsaWithSHA1"
+  NID_dsaWithSHA1* = 113
+  SN_ansi_X9_62* = "ansi-X9-62"
+  LN_ansi_X9_62* = "ANSI X9.62"
+  NID_ansi_X9_62* = 405
+  SN_X9_62_prime_field* = "prime-field"
+  NID_X9_62_prime_field* = 406
+  SN_X9_62_characteristic_two_field* = "characteristic-two-field"
+  NID_X9_62_characteristic_two_field* = 407
+  SN_X9_62_id_characteristic_two_basis* = "id-characteristic-two-basis"
+  NID_X9_62_id_characteristic_two_basis* = 680
+  SN_X9_62_onBasis* = "onBasis"
+  NID_X9_62_onBasis* = 681
+  SN_X9_62_tpBasis* = "tpBasis"
+  NID_X9_62_tpBasis* = 682
+  SN_X9_62_ppBasis* = "ppBasis"
+  NID_X9_62_ppBasis* = 683
+  SN_X9_62_id_ecPublicKey* = "id-ecPublicKey"
+  NID_X9_62_id_ecPublicKey* = 408
+  SN_X9_62_c2pnb163v1* = "c2pnb163v1"
+  NID_X9_62_c2pnb163v1* = 684
+  SN_X9_62_c2pnb163v2* = "c2pnb163v2"
+  NID_X9_62_c2pnb163v2* = 685
+  SN_X9_62_c2pnb163v3* = "c2pnb163v3"
+  NID_X9_62_c2pnb163v3* = 686
+  SN_X9_62_c2pnb176v1* = "c2pnb176v1"
+  NID_X9_62_c2pnb176v1* = 687
+  SN_X9_62_c2tnb191v1* = "c2tnb191v1"
+  NID_X9_62_c2tnb191v1* = 688
+  SN_X9_62_c2tnb191v2* = "c2tnb191v2"
+  NID_X9_62_c2tnb191v2* = 689
+  SN_X9_62_c2tnb191v3* = "c2tnb191v3"
+  NID_X9_62_c2tnb191v3* = 690
+  SN_X9_62_c2onb191v4* = "c2onb191v4"
+  NID_X9_62_c2onb191v4* = 691
+  SN_X9_62_c2onb191v5* = "c2onb191v5"
+  NID_X9_62_c2onb191v5* = 692
+  SN_X9_62_c2pnb208w1* = "c2pnb208w1"
+  NID_X9_62_c2pnb208w1* = 693
+  SN_X9_62_c2tnb239v1* = "c2tnb239v1"
+  NID_X9_62_c2tnb239v1* = 694
+  SN_X9_62_c2tnb239v2* = "c2tnb239v2"
+  NID_X9_62_c2tnb239v2* = 695
+  SN_X9_62_c2tnb239v3* = "c2tnb239v3"
+  NID_X9_62_c2tnb239v3* = 696
+  SN_X9_62_c2onb239v4* = "c2onb239v4"
+  NID_X9_62_c2onb239v4* = 697
+  SN_X9_62_c2onb239v5* = "c2onb239v5"
+  NID_X9_62_c2onb239v5* = 698
+  SN_X9_62_c2pnb272w1* = "c2pnb272w1"
+  NID_X9_62_c2pnb272w1* = 699
+  SN_X9_62_c2pnb304w1* = "c2pnb304w1"
+  NID_X9_62_c2pnb304w1* = 700
+  SN_X9_62_c2tnb359v1* = "c2tnb359v1"
+  NID_X9_62_c2tnb359v1* = 701
+  SN_X9_62_c2pnb368w1* = "c2pnb368w1"
+  NID_X9_62_c2pnb368w1* = 702
+  SN_X9_62_c2tnb431r1* = "c2tnb431r1"
+  NID_X9_62_c2tnb431r1* = 703
+  SN_X9_62_prime192v1* = "prime192v1"
+  NID_X9_62_prime192v1* = 409
+  SN_X9_62_prime192v2* = "prime192v2"
+  NID_X9_62_prime192v2* = 410
+  SN_X9_62_prime192v3* = "prime192v3"
+  NID_X9_62_prime192v3* = 411
+  SN_X9_62_prime239v1* = "prime239v1"
+  NID_X9_62_prime239v1* = 412
+  SN_X9_62_prime239v2* = "prime239v2"
+  NID_X9_62_prime239v2* = 413
+  SN_X9_62_prime239v3* = "prime239v3"
+  NID_X9_62_prime239v3* = 414
+  SN_X9_62_prime256v1* = "prime256v1"
+  NID_X9_62_prime256v1* = 415
+  SN_ecdsa_with_SHA1* = "ecdsa-with-SHA1"
+  NID_ecdsa_with_SHA1* = 416
+  SN_ecdsa_with_Recommended* = "ecdsa-with-Recommended"
+  NID_ecdsa_with_Recommended* = 791
+  SN_ecdsa_with_Specified* = "ecdsa-with-Specified"
+  NID_ecdsa_with_Specified* = 792
+  SN_ecdsa_with_SHA224* = "ecdsa-with-SHA224"
+  NID_ecdsa_with_SHA224* = 793
+  SN_ecdsa_with_SHA256* = "ecdsa-with-SHA256"
+  NID_ecdsa_with_SHA256* = 794
+  SN_ecdsa_with_SHA384* = "ecdsa-with-SHA384"
+  NID_ecdsa_with_SHA384* = 795
+  SN_ecdsa_with_SHA512* = "ecdsa-with-SHA512"
+  NID_ecdsa_with_SHA512* = 796
+  SN_secp112r1* = "secp112r1"
+  NID_secp112r1* = 704
+  SN_secp112r2* = "secp112r2"
+  NID_secp112r2* = 705
+  SN_secp128r1* = "secp128r1"
+  NID_secp128r1* = 706
+  SN_secp128r2* = "secp128r2"
+  NID_secp128r2* = 707
+  SN_secp160k1* = "secp160k1"
+  NID_secp160k1* = 708
+  SN_secp160r1* = "secp160r1"
+  NID_secp160r1* = 709
+  SN_secp160r2* = "secp160r2"
+  NID_secp160r2* = 710
+  SN_secp192k1* = "secp192k1"
+  NID_secp192k1* = 711
+  SN_secp224k1* = "secp224k1"
+  NID_secp224k1* = 712
+  SN_secp224r1* = "secp224r1"
+  NID_secp224r1* = 713
+  SN_secp256k1* = "secp256k1"
+  NID_secp256k1* = 714
+  SN_secp384r1* = "secp384r1"
+  NID_secp384r1* = 715
+  SN_secp521r1* = "secp521r1"
+  NID_secp521r1* = 716
+  SN_sect113r1* = "sect113r1"
+  NID_sect113r1* = 717
+  SN_sect113r2* = "sect113r2"
+  NID_sect113r2* = 718
+  SN_sect131r1* = "sect131r1"
+  NID_sect131r1* = 719
+  SN_sect131r2* = "sect131r2"
+  NID_sect131r2* = 720
+  SN_sect163k1* = "sect163k1"
+  NID_sect163k1* = 721
+  SN_sect163r1* = "sect163r1"
+  NID_sect163r1* = 722
+  SN_sect163r2* = "sect163r2"
+  NID_sect163r2* = 723
+  SN_sect193r1* = "sect193r1"
+  NID_sect193r1* = 724
+  SN_sect193r2* = "sect193r2"
+  NID_sect193r2* = 725
+  SN_sect233k1* = "sect233k1"
+  NID_sect233k1* = 726
+  SN_sect233r1* = "sect233r1"
+  NID_sect233r1* = 727
+  SN_sect239k1* = "sect239k1"
+  NID_sect239k1* = 728
+  SN_sect283k1* = "sect283k1"
+  NID_sect283k1* = 729
+  SN_sect283r1* = "sect283r1"
+  NID_sect283r1* = 730
+  SN_sect409k1* = "sect409k1"
+  NID_sect409k1* = 731
+  SN_sect409r1* = "sect409r1"
+  NID_sect409r1* = 732
+  SN_sect571k1* = "sect571k1"
+  NID_sect571k1* = 733
+  SN_sect571r1* = "sect571r1"
+  NID_sect571r1* = 734
+  SN_wap_wsg_idm_ecid_wtls1* = "wap-wsg-idm-ecid-wtls1"
+  NID_wap_wsg_idm_ecid_wtls1* = 735
+  SN_wap_wsg_idm_ecid_wtls3* = "wap-wsg-idm-ecid-wtls3"
+  NID_wap_wsg_idm_ecid_wtls3* = 736
+  SN_wap_wsg_idm_ecid_wtls4* = "wap-wsg-idm-ecid-wtls4"
+  NID_wap_wsg_idm_ecid_wtls4* = 737
+  SN_wap_wsg_idm_ecid_wtls5* = "wap-wsg-idm-ecid-wtls5"
+  NID_wap_wsg_idm_ecid_wtls5* = 738
+  SN_wap_wsg_idm_ecid_wtls6* = "wap-wsg-idm-ecid-wtls6"
+  NID_wap_wsg_idm_ecid_wtls6* = 739
+  SN_wap_wsg_idm_ecid_wtls7* = "wap-wsg-idm-ecid-wtls7"
+  NID_wap_wsg_idm_ecid_wtls7* = 740
+  SN_wap_wsg_idm_ecid_wtls8* = "wap-wsg-idm-ecid-wtls8"
+  NID_wap_wsg_idm_ecid_wtls8* = 741
+  SN_wap_wsg_idm_ecid_wtls9* = "wap-wsg-idm-ecid-wtls9"
+  NID_wap_wsg_idm_ecid_wtls9* = 742
+  SN_wap_wsg_idm_ecid_wtls10* = "wap-wsg-idm-ecid-wtls10"
+  NID_wap_wsg_idm_ecid_wtls10* = 743
+  SN_wap_wsg_idm_ecid_wtls11* = "wap-wsg-idm-ecid-wtls11"
+  NID_wap_wsg_idm_ecid_wtls11* = 744
+  SN_wap_wsg_idm_ecid_wtls12* = "wap-wsg-idm-ecid-wtls12"
+  NID_wap_wsg_idm_ecid_wtls12* = 745
+  SN_cast5_cbc* = "CAST5-CBC"
+  LN_cast5_cbc* = "cast5-cbc"
+  NID_cast5_cbc* = 108
+  SN_cast5_ecb* = "CAST5-ECB"
+  LN_cast5_ecb* = "cast5-ecb"
+  NID_cast5_ecb* = 109
+  SN_cast5_cfb64* = "CAST5-CFB"
+  LN_cast5_cfb64* = "cast5-cfb"
+  NID_cast5_cfb64* = 110
+  SN_cast5_ofb64* = "CAST5-OFB"
+  LN_cast5_ofb64* = "cast5-ofb"
+  NID_cast5_ofb64* = 111
+  LN_pbeWithMD5AndCast5_CBC* = "pbeWithMD5AndCast5CBC"
+  NID_pbeWithMD5AndCast5_CBC* = 112
+  SN_id_PasswordBasedMAC* = "id-PasswordBasedMAC"
+  LN_id_PasswordBasedMAC* = "password based MAC"
+  NID_id_PasswordBasedMAC* = 782
+  SN_id_DHBasedMac* = "id-DHBasedMac"
+  LN_id_DHBasedMac* = "Diffie-Hellman based MAC"
+  NID_id_DHBasedMac* = 783
+  SN_rsadsi* = "rsadsi"
+  LN_rsadsi* = "RSA Data Security, Inc."
+  NID_rsadsi* = 1
+  SN_pkcs* = "pkcs"
+  LN_pkcs* = "RSA Data Security, Inc. PKCS"
+  NID_pkcs* = 2
+  SN_pkcs1* = "pkcs1"
+  NID_pkcs1* = 186
+  LN_rsaEncryption* = "rsaEncryption"
+  NID_rsaEncryption* = 6
+  SN_md2WithRSAEncryption* = "RSA-MD2"
+  LN_md2WithRSAEncryption* = "md2WithRSAEncryption"
+  NID_md2WithRSAEncryption* = 7
+  SN_md4WithRSAEncryption* = "RSA-MD4"
+  LN_md4WithRSAEncryption* = "md4WithRSAEncryption"
+  NID_md4WithRSAEncryption* = 396
+  SN_md5WithRSAEncryption* = "RSA-MD5"
+  LN_md5WithRSAEncryption* = "md5WithRSAEncryption"
+  NID_md5WithRSAEncryption* = 8
+  SN_sha1WithRSAEncryption* = "RSA-SHA1"
+  LN_sha1WithRSAEncryption* = "sha1WithRSAEncryption"
+  NID_sha1WithRSAEncryption* = 65
+  SN_rsaesOaep* = "RSAES-OAEP"
+  LN_rsaesOaep* = "rsaesOaep"
+  NID_rsaesOaep* = 919
+  SN_mgf1* = "MGF1"
+  LN_mgf1* = "mgf1"
+  NID_mgf1* = 911
+  SN_pSpecified* = "PSPECIFIED"
+  LN_pSpecified* = "pSpecified"
+  NID_pSpecified* = 935
+  SN_rsassaPss* = "RSASSA-PSS"
+  LN_rsassaPss* = "rsassaPss"
+  NID_rsassaPss* = 912
+  SN_sha256WithRSAEncryption* = "RSA-SHA256"
+  LN_sha256WithRSAEncryption* = "sha256WithRSAEncryption"
+  NID_sha256WithRSAEncryption* = 668
+  SN_sha384WithRSAEncryption* = "RSA-SHA384"
+  LN_sha384WithRSAEncryption* = "sha384WithRSAEncryption"
+  NID_sha384WithRSAEncryption* = 669
+  SN_sha512WithRSAEncryption* = "RSA-SHA512"
+  LN_sha512WithRSAEncryption* = "sha512WithRSAEncryption"
+  NID_sha512WithRSAEncryption* = 670
+  SN_sha224WithRSAEncryption* = "RSA-SHA224"
+  LN_sha224WithRSAEncryption* = "sha224WithRSAEncryption"
+  NID_sha224WithRSAEncryption* = 671
+  SN_sha512_224WithRSAEncryption* = "RSA-SHA512/224"
+  LN_sha512_224WithRSAEncryption* = "sha512-224WithRSAEncryption"
+  NID_sha512_224WithRSAEncryption* = 1145
+  SN_sha512_256WithRSAEncryption* = "RSA-SHA512/256"
+  LN_sha512_256WithRSAEncryption* = "sha512-256WithRSAEncryption"
+  NID_sha512_256WithRSAEncryption* = 1146
+  SN_pkcs3* = "pkcs3"
+  NID_pkcs3* = 27
+  LN_dhKeyAgreement* = "dhKeyAgreement"
+  NID_dhKeyAgreement* = 28
+  SN_pkcs5* = "pkcs5"
+  NID_pkcs5* = 187
+  SN_pbeWithMD2AndDES_CBC* = "PBE-MD2-DES"
+  LN_pbeWithMD2AndDES_CBC* = "pbeWithMD2AndDES-CBC"
+  NID_pbeWithMD2AndDES_CBC* = 9
+  SN_pbeWithMD5AndDES_CBC* = "PBE-MD5-DES"
+  LN_pbeWithMD5AndDES_CBC* = "pbeWithMD5AndDES-CBC"
+  NID_pbeWithMD5AndDES_CBC* = 10
+  SN_pbeWithMD2AndRC2_CBC* = "PBE-MD2-RC2-64"
+  LN_pbeWithMD2AndRC2_CBC* = "pbeWithMD2AndRC2-CBC"
+  NID_pbeWithMD2AndRC2_CBC* = 168
+  SN_pbeWithMD5AndRC2_CBC* = "PBE-MD5-RC2-64"
+  LN_pbeWithMD5AndRC2_CBC* = "pbeWithMD5AndRC2-CBC"
+  NID_pbeWithMD5AndRC2_CBC* = 169
+  SN_pbeWithSHA1AndDES_CBC* = "PBE-SHA1-DES"
+  LN_pbeWithSHA1AndDES_CBC* = "pbeWithSHA1AndDES-CBC"
+  NID_pbeWithSHA1AndDES_CBC* = 170
+  SN_pbeWithSHA1AndRC2_CBC* = "PBE-SHA1-RC2-64"
+  LN_pbeWithSHA1AndRC2_CBC* = "pbeWithSHA1AndRC2-CBC"
+  NID_pbeWithSHA1AndRC2_CBC* = 68
+  LN_id_pbkdf2* = "PBKDF2"
+  NID_id_pbkdf2* = 69
+  LN_pbes2* = "PBES2"
+  NID_pbes2* = 161
+  LN_pbmac1* = "PBMAC1"
+  NID_pbmac1* = 162
+  SN_pkcs7* = "pkcs7"
+  NID_pkcs7* = 20
+  LN_pkcs7_data* = "pkcs7-data"
+  NID_pkcs7_data* = 21
+  LN_pkcs7_signed* = "pkcs7-signedData"
+  NID_pkcs7_signed* = 22
+  LN_pkcs7_enveloped* = "pkcs7-envelopedData"
+  NID_pkcs7_enveloped* = 23
+  LN_pkcs7_signedAndEnveloped* = "pkcs7-signedAndEnvelopedData"
+  NID_pkcs7_signedAndEnveloped* = 24
+  LN_pkcs7_digest* = "pkcs7-digestData"
+  NID_pkcs7_digest* = 25
+  LN_pkcs7_encrypted* = "pkcs7-encryptedData"
+  NID_pkcs7_encrypted* = 26
+  SN_pkcs9* = "pkcs9"
+  NID_pkcs9* = 47
+  LN_pkcs9_emailAddress* = "emailAddress"
+  NID_pkcs9_emailAddress* = 48
+  LN_pkcs9_unstructuredName* = "unstructuredName"
+  NID_pkcs9_unstructuredName* = 49
+  LN_pkcs9_contentType* = "contentType"
+  NID_pkcs9_contentType* = 50
+  LN_pkcs9_messageDigest* = "messageDigest"
+  NID_pkcs9_messageDigest* = 51
+  LN_pkcs9_signingTime* = "signingTime"
+  NID_pkcs9_signingTime* = 52
+  LN_pkcs9_countersignature* = "countersignature"
+  NID_pkcs9_countersignature* = 53
+  LN_pkcs9_challengePassword* = "challengePassword"
+  NID_pkcs9_challengePassword* = 54
+  LN_pkcs9_unstructuredAddress* = "unstructuredAddress"
+  NID_pkcs9_unstructuredAddress* = 55
+  LN_pkcs9_extCertAttributes* = "extendedCertificateAttributes"
+  NID_pkcs9_extCertAttributes* = 56
+  SN_ext_req* = "extReq"
+  LN_ext_req* = "Extension Request"
+  NID_ext_req* = 172
+  SN_SMIMECapabilities* = "SMIME-CAPS"
+  LN_SMIMECapabilities* = "S/MIME Capabilities"
+  NID_SMIMECapabilities* = 167
+  SN_SMIME* = "SMIME"
+  LN_SMIME* = "S/MIME"
+  NID_SMIME* = 188
+  SN_id_smime_mod* = "id-smime-mod"
+  NID_id_smime_mod* = 189
+  SN_id_smime_ct* = "id-smime-ct"
+  NID_id_smime_ct* = 190
+  SN_id_smime_aa* = "id-smime-aa"
+  NID_id_smime_aa* = 191
+  SN_id_smime_alg* = "id-smime-alg"
+  NID_id_smime_alg* = 192
+  SN_id_smime_cd* = "id-smime-cd"
+  NID_id_smime_cd* = 193
+  SN_id_smime_spq* = "id-smime-spq"
+  NID_id_smime_spq* = 194
+  SN_id_smime_cti* = "id-smime-cti"
+  NID_id_smime_cti* = 195
+  SN_id_smime_mod_cms* = "id-smime-mod-cms"
+  NID_id_smime_mod_cms* = 196
+  SN_id_smime_mod_ess* = "id-smime-mod-ess"
+  NID_id_smime_mod_ess* = 197
+  SN_id_smime_mod_oid* = "id-smime-mod-oid"
+  NID_id_smime_mod_oid* = 198
+  SN_id_smime_mod_msg_v3* = "id-smime-mod-msg-v3"
+  NID_id_smime_mod_msg_v3* = 199
+  SN_id_smime_mod_ets_eSignature_88* = "id-smime-mod-ets-eSignature-88"
+  NID_id_smime_mod_ets_eSignature_88* = 200
+  SN_id_smime_mod_ets_eSignature_97* = "id-smime-mod-ets-eSignature-97"
+  NID_id_smime_mod_ets_eSignature_97* = 201
+  SN_id_smime_mod_ets_eSigPolicy_88* = "id-smime-mod-ets-eSigPolicy-88"
+  NID_id_smime_mod_ets_eSigPolicy_88* = 202
+  SN_id_smime_mod_ets_eSigPolicy_97* = "id-smime-mod-ets-eSigPolicy-97"
+  NID_id_smime_mod_ets_eSigPolicy_97* = 203
+  SN_id_smime_ct_receipt* = "id-smime-ct-receipt"
+  NID_id_smime_ct_receipt* = 204
+  SN_id_smime_ct_authData* = "id-smime-ct-authData"
+  NID_id_smime_ct_authData* = 205
+  SN_id_smime_ct_publishCert* = "id-smime-ct-publishCert"
+  NID_id_smime_ct_publishCert* = 206
+  SN_id_smime_ct_TSTInfo* = "id-smime-ct-TSTInfo"
+  NID_id_smime_ct_TSTInfo* = 207
+  SN_id_smime_ct_TDTInfo* = "id-smime-ct-TDTInfo"
+  NID_id_smime_ct_TDTInfo* = 208
+  SN_id_smime_ct_contentInfo* = "id-smime-ct-contentInfo"
+  NID_id_smime_ct_contentInfo* = 209
+  SN_id_smime_ct_DVCSRequestData* = "id-smime-ct-DVCSRequestData"
+  NID_id_smime_ct_DVCSRequestData* = 210
+  SN_id_smime_ct_DVCSResponseData* = "id-smime-ct-DVCSResponseData"
+  NID_id_smime_ct_DVCSResponseData* = 211
+  SN_id_smime_ct_compressedData* = "id-smime-ct-compressedData"
+  NID_id_smime_ct_compressedData* = 786
+  SN_id_smime_ct_contentCollection* = "id-smime-ct-contentCollection"
+  NID_id_smime_ct_contentCollection* = 1058
+  SN_id_smime_ct_authEnvelopedData* = "id-smime-ct-authEnvelopedData"
+  NID_id_smime_ct_authEnvelopedData* = 1059
+  SN_id_ct_routeOriginAuthz* = "id-ct-routeOriginAuthz"
+  NID_id_ct_routeOriginAuthz* = 1234
+  SN_id_ct_rpkiManifest* = "id-ct-rpkiManifest"
+  NID_id_ct_rpkiManifest* = 1235
+  SN_id_ct_asciiTextWithCRLF* = "id-ct-asciiTextWithCRLF"
+  NID_id_ct_asciiTextWithCRLF* = 787
+  SN_id_ct_xml* = "id-ct-xml"
+  NID_id_ct_xml* = 1060
+  SN_id_ct_rpkiGhostbusters* = "id-ct-rpkiGhostbusters"
+  NID_id_ct_rpkiGhostbusters* = 1236
+  SN_id_ct_resourceTaggedAttest* = "id-ct-resourceTaggedAttest"
+  NID_id_ct_resourceTaggedAttest* = 1237
+  SN_id_ct_geofeedCSVwithCRLF* = "id-ct-geofeedCSVwithCRLF"
+  NID_id_ct_geofeedCSVwithCRLF* = 1246
+  SN_id_ct_signedChecklist* = "id-ct-signedChecklist"
+  NID_id_ct_signedChecklist* = 1247
+  SN_id_ct_ASPA* = "id-ct-ASPA"
+  NID_id_ct_ASPA* = 1250
+  SN_id_ct_signedTAL* = "id-ct-signedTAL"
+  NID_id_ct_signedTAL* = 1284
+  SN_id_ct_rpkiSignedPrefixList* = "id-ct-rpkiSignedPrefixList"
+  NID_id_ct_rpkiSignedPrefixList* = 1320
+  SN_id_smime_aa_receiptRequest* = "id-smime-aa-receiptRequest"
+  NID_id_smime_aa_receiptRequest* = 212
+  SN_id_smime_aa_securityLabel* = "id-smime-aa-securityLabel"
+  NID_id_smime_aa_securityLabel* = 213
+  SN_id_smime_aa_mlExpandHistory* = "id-smime-aa-mlExpandHistory"
+  NID_id_smime_aa_mlExpandHistory* = 214
+  SN_id_smime_aa_contentHint* = "id-smime-aa-contentHint"
+  NID_id_smime_aa_contentHint* = 215
+  SN_id_smime_aa_msgSigDigest* = "id-smime-aa-msgSigDigest"
+  NID_id_smime_aa_msgSigDigest* = 216
+  SN_id_smime_aa_encapContentType* = "id-smime-aa-encapContentType"
+  NID_id_smime_aa_encapContentType* = 217
+  SN_id_smime_aa_contentIdentifier* = "id-smime-aa-contentIdentifier"
+  NID_id_smime_aa_contentIdentifier* = 218
+  SN_id_smime_aa_macValue* = "id-smime-aa-macValue"
+  NID_id_smime_aa_macValue* = 219
+  SN_id_smime_aa_equivalentLabels* = "id-smime-aa-equivalentLabels"
+  NID_id_smime_aa_equivalentLabels* = 220
+  SN_id_smime_aa_contentReference* = "id-smime-aa-contentReference"
+  NID_id_smime_aa_contentReference* = 221
+  SN_id_smime_aa_encrypKeyPref* = "id-smime-aa-encrypKeyPref"
+  NID_id_smime_aa_encrypKeyPref* = 222
+  SN_id_smime_aa_signingCertificate* = "id-smime-aa-signingCertificate"
+  NID_id_smime_aa_signingCertificate* = 223
+  SN_id_smime_aa_smimeEncryptCerts* = "id-smime-aa-smimeEncryptCerts"
+  NID_id_smime_aa_smimeEncryptCerts* = 224
+  SN_id_smime_aa_timeStampToken* = "id-smime-aa-timeStampToken"
+  NID_id_smime_aa_timeStampToken* = 225
+  SN_id_smime_aa_ets_sigPolicyId* = "id-smime-aa-ets-sigPolicyId"
+  NID_id_smime_aa_ets_sigPolicyId* = 226
+  SN_id_smime_aa_ets_commitmentType* = "id-smime-aa-ets-commitmentType"
+  NID_id_smime_aa_ets_commitmentType* = 227
+  SN_id_smime_aa_ets_signerLocation* = "id-smime-aa-ets-signerLocation"
+  NID_id_smime_aa_ets_signerLocation* = 228
+  SN_id_smime_aa_ets_signerAttr* = "id-smime-aa-ets-signerAttr"
+  NID_id_smime_aa_ets_signerAttr* = 229
+  SN_id_smime_aa_ets_otherSigCert* = "id-smime-aa-ets-otherSigCert"
+  NID_id_smime_aa_ets_otherSigCert* = 230
+  SN_id_smime_aa_ets_contentTimestamp* = "id-smime-aa-ets-contentTimestamp"
+  NID_id_smime_aa_ets_contentTimestamp* = 231
+  SN_id_smime_aa_ets_CertificateRefs* = "id-smime-aa-ets-CertificateRefs"
+  NID_id_smime_aa_ets_CertificateRefs* = 232
+  SN_id_smime_aa_ets_RevocationRefs* = "id-smime-aa-ets-RevocationRefs"
+  NID_id_smime_aa_ets_RevocationRefs* = 233
+  SN_id_smime_aa_ets_certValues* = "id-smime-aa-ets-certValues"
+  NID_id_smime_aa_ets_certValues* = 234
+  SN_id_smime_aa_ets_revocationValues* = "id-smime-aa-ets-revocationValues"
+  NID_id_smime_aa_ets_revocationValues* = 235
+  SN_id_smime_aa_ets_escTimeStamp* = "id-smime-aa-ets-escTimeStamp"
+  NID_id_smime_aa_ets_escTimeStamp* = 236
+  SN_id_smime_aa_ets_certCRLTimestamp* = "id-smime-aa-ets-certCRLTimestamp"
+  NID_id_smime_aa_ets_certCRLTimestamp* = 237
+  SN_id_smime_aa_ets_archiveTimeStamp* = "id-smime-aa-ets-archiveTimeStamp"
+  NID_id_smime_aa_ets_archiveTimeStamp* = 238
+  SN_id_smime_aa_signatureType* = "id-smime-aa-signatureType"
+  NID_id_smime_aa_signatureType* = 239
+  SN_id_smime_aa_dvcs_dvc* = "id-smime-aa-dvcs-dvc"
+  NID_id_smime_aa_dvcs_dvc* = 240
+  SN_id_aa_ets_attrCertificateRefs* = "id-aa-ets-attrCertificateRefs"
+  NID_id_aa_ets_attrCertificateRefs* = 1261
+  SN_id_aa_ets_attrRevocationRefs* = "id-aa-ets-attrRevocationRefs"
+  NID_id_aa_ets_attrRevocationRefs* = 1262
+  SN_id_smime_aa_signingCertificateV2* = "id-smime-aa-signingCertificateV2"
+  NID_id_smime_aa_signingCertificateV2* = 1086
+  SN_id_aa_ets_archiveTimestampV2* = "id-aa-ets-archiveTimestampV2"
+  NID_id_aa_ets_archiveTimestampV2* = 1280
+  SN_id_smime_alg_ESDHwith3DES* = "id-smime-alg-ESDHwith3DES"
+  NID_id_smime_alg_ESDHwith3DES* = 241
+  SN_id_smime_alg_ESDHwithRC2* = "id-smime-alg-ESDHwithRC2"
+  NID_id_smime_alg_ESDHwithRC2* = 242
+  SN_id_smime_alg_3DESwrap* = "id-smime-alg-3DESwrap"
+  NID_id_smime_alg_3DESwrap* = 243
+  SN_id_smime_alg_RC2wrap* = "id-smime-alg-RC2wrap"
+  NID_id_smime_alg_RC2wrap* = 244
+  SN_id_smime_alg_ESDH* = "id-smime-alg-ESDH"
+  NID_id_smime_alg_ESDH* = 245
+  SN_id_smime_alg_CMS3DESwrap* = "id-smime-alg-CMS3DESwrap"
+  NID_id_smime_alg_CMS3DESwrap* = 246
+  SN_id_smime_alg_CMSRC2wrap* = "id-smime-alg-CMSRC2wrap"
+  NID_id_smime_alg_CMSRC2wrap* = 247
+  SN_id_alg_PWRI_KEK* = "id-alg-PWRI-KEK"
+  NID_id_alg_PWRI_KEK* = 893
+  SN_id_smime_cd_ldap* = "id-smime-cd-ldap"
+  NID_id_smime_cd_ldap* = 248
+  SN_id_smime_spq_ets_sqt_uri* = "id-smime-spq-ets-sqt-uri"
+  NID_id_smime_spq_ets_sqt_uri* = 249
+  SN_id_smime_spq_ets_sqt_unotice* = "id-smime-spq-ets-sqt-unotice"
+  NID_id_smime_spq_ets_sqt_unotice* = 250
+  SN_id_smime_cti_ets_proofOfOrigin* = "id-smime-cti-ets-proofOfOrigin"
+  NID_id_smime_cti_ets_proofOfOrigin* = 251
+  SN_id_smime_cti_ets_proofOfReceipt* = "id-smime-cti-ets-proofOfReceipt"
+  NID_id_smime_cti_ets_proofOfReceipt* = 252
+  SN_id_smime_cti_ets_proofOfDelivery* = "id-smime-cti-ets-proofOfDelivery"
+  NID_id_smime_cti_ets_proofOfDelivery* = 253
+  SN_id_smime_cti_ets_proofOfSender* = "id-smime-cti-ets-proofOfSender"
+  NID_id_smime_cti_ets_proofOfSender* = 254
+  SN_id_smime_cti_ets_proofOfApproval* = "id-smime-cti-ets-proofOfApproval"
+  NID_id_smime_cti_ets_proofOfApproval* = 255
+  SN_id_smime_cti_ets_proofOfCreation* = "id-smime-cti-ets-proofOfCreation"
+  NID_id_smime_cti_ets_proofOfCreation* = 256
+  LN_friendlyName* = "friendlyName"
+  NID_friendlyName* = 156
+  LN_localKeyID* = "localKeyID"
+  NID_localKeyID* = 157
+  SN_ms_csp_name* = "CSPName"
+  LN_ms_csp_name* = "Microsoft CSP Name"
+  NID_ms_csp_name* = 417
+  SN_LocalKeySet* = "LocalKeySet"
+  LN_LocalKeySet* = "Microsoft Local Key set"
+  NID_LocalKeySet* = 856
+  LN_x509Certificate* = "x509Certificate"
+  NID_x509Certificate* = 158
+  LN_sdsiCertificate* = "sdsiCertificate"
+  NID_sdsiCertificate* = 159
+  LN_x509Crl* = "x509Crl"
+  NID_x509Crl* = 160
+  SN_id_aa_CMSAlgorithmProtection* = "id-aa-CMSAlgorithmProtection"
+  NID_id_aa_CMSAlgorithmProtection* = 1263
+  SN_pbe_WithSHA1And128BitRC4* = "PBE-SHA1-RC4-128"
+  LN_pbe_WithSHA1And128BitRC4* = "pbeWithSHA1And128BitRC4"
+  NID_pbe_WithSHA1And128BitRC4* = 144
+  SN_pbe_WithSHA1And40BitRC4* = "PBE-SHA1-RC4-40"
+  LN_pbe_WithSHA1And40BitRC4* = "pbeWithSHA1And40BitRC4"
+  NID_pbe_WithSHA1And40BitRC4* = 145
+  SN_pbe_WithSHA1And3_Key_TripleDES_CBC* = "PBE-SHA1-3DES"
+  LN_pbe_WithSHA1And3_Key_TripleDES_CBC* = "pbeWithSHA1And3-KeyTripleDES-CBC"
+  NID_pbe_WithSHA1And3_Key_TripleDES_CBC* = 146
+  SN_pbe_WithSHA1And2_Key_TripleDES_CBC* = "PBE-SHA1-2DES"
+  LN_pbe_WithSHA1And2_Key_TripleDES_CBC* = "pbeWithSHA1And2-KeyTripleDES-CBC"
+  NID_pbe_WithSHA1And2_Key_TripleDES_CBC* = 147
+  SN_pbe_WithSHA1And128BitRC2_CBC* = "PBE-SHA1-RC2-128"
+  LN_pbe_WithSHA1And128BitRC2_CBC* = "pbeWithSHA1And128BitRC2-CBC"
+  NID_pbe_WithSHA1And128BitRC2_CBC* = 148
+  SN_pbe_WithSHA1And40BitRC2_CBC* = "PBE-SHA1-RC2-40"
+  LN_pbe_WithSHA1And40BitRC2_CBC* = "pbeWithSHA1And40BitRC2-CBC"
+  NID_pbe_WithSHA1And40BitRC2_CBC* = 149
+  LN_keyBag* = "keyBag"
+  NID_keyBag* = 150
+  LN_pkcs8ShroudedKeyBag* = "pkcs8ShroudedKeyBag"
+  NID_pkcs8ShroudedKeyBag* = 151
+  LN_certBag* = "certBag"
+  NID_certBag* = 152
+  LN_crlBag* = "crlBag"
+  NID_crlBag* = 153
+  LN_secretBag* = "secretBag"
+  NID_secretBag* = 154
+  LN_safeContentsBag* = "safeContentsBag"
+  NID_safeContentsBag* = 155
+  SN_md2* = "MD2"
+  LN_md2* = "md2"
+  NID_md2* = 3
+  SN_md4* = "MD4"
+  LN_md4* = "md4"
+  NID_md4* = 257
+  SN_md5* = "MD5"
+  LN_md5* = "md5"
+  NID_md5* = 4
+  SN_md5_sha1* = "MD5-SHA1"
+  LN_md5_sha1* = "md5-sha1"
+  NID_md5_sha1* = 114
+  LN_hmacWithMD5* = "hmacWithMD5"
+  NID_hmacWithMD5* = 797
+  LN_hmacWithSHA1* = "hmacWithSHA1"
+  NID_hmacWithSHA1* = 163
+  SN_sm2* = "SM2"
+  LN_sm2* = "sm2"
+  NID_sm2* = 1172
+  SN_sm3* = "SM3"
+  LN_sm3* = "sm3"
+  NID_sm3* = 1143
+  SN_sm3WithRSAEncryption* = "RSA-SM3"
+  LN_sm3WithRSAEncryption* = "sm3WithRSAEncryption"
+  NID_sm3WithRSAEncryption* = 1144
+  SN_SM2_with_SM3* = "SM2-SM3"
+  LN_SM2_with_SM3* = "SM2-with-SM3"
+  NID_SM2_with_SM3* = 1204
+  LN_hmacWithSM3* = "hmacWithSM3"
+  NID_hmacWithSM3* = 1281
+  LN_hmacWithSHA224* = "hmacWithSHA224"
+  NID_hmacWithSHA224* = 798
+  LN_hmacWithSHA256* = "hmacWithSHA256"
+  NID_hmacWithSHA256* = 799
+  LN_hmacWithSHA384* = "hmacWithSHA384"
+  NID_hmacWithSHA384* = 800
+  LN_hmacWithSHA512* = "hmacWithSHA512"
+  NID_hmacWithSHA512* = 801
+  LN_hmacWithSHA512_224* = "hmacWithSHA512-224"
+  NID_hmacWithSHA512_224* = 1193
+  LN_hmacWithSHA512_256* = "hmacWithSHA512-256"
+  NID_hmacWithSHA512_256* = 1194
+  SN_rc2_cbc* = "RC2-CBC"
+  LN_rc2_cbc* = "rc2-cbc"
+  NID_rc2_cbc* = 37
+  SN_rc2_ecb* = "RC2-ECB"
+  LN_rc2_ecb* = "rc2-ecb"
+  NID_rc2_ecb* = 38
+  SN_rc2_cfb64* = "RC2-CFB"
+  LN_rc2_cfb64* = "rc2-cfb"
+  NID_rc2_cfb64* = 39
+  SN_rc2_ofb64* = "RC2-OFB"
+  LN_rc2_ofb64* = "rc2-ofb"
+  NID_rc2_ofb64* = 40
+  SN_rc2_40_cbc* = "RC2-40-CBC"
+  LN_rc2_40_cbc* = "rc2-40-cbc"
+  NID_rc2_40_cbc* = 98
+  SN_rc2_64_cbc* = "RC2-64-CBC"
+  LN_rc2_64_cbc* = "rc2-64-cbc"
+  NID_rc2_64_cbc* = 166
+  SN_rc4* = "RC4"
+  LN_rc4* = "rc4"
+  NID_rc4* = 5
+  SN_rc4_40* = "RC4-40"
+  LN_rc4_40* = "rc4-40"
+  NID_rc4_40* = 97
+  SN_des_ede3_cbc* = "DES-EDE3-CBC"
+  LN_des_ede3_cbc* = "des-ede3-cbc"
+  NID_des_ede3_cbc* = 44
+  SN_rc5_cbc* = "RC5-CBC"
+  LN_rc5_cbc* = "rc5-cbc"
+  NID_rc5_cbc* = 120
+  SN_rc5_ecb* = "RC5-ECB"
+  LN_rc5_ecb* = "rc5-ecb"
+  NID_rc5_ecb* = 121
+  SN_rc5_cfb64* = "RC5-CFB"
+  LN_rc5_cfb64* = "rc5-cfb"
+  NID_rc5_cfb64* = 122
+  SN_rc5_ofb64* = "RC5-OFB"
+  LN_rc5_ofb64* = "rc5-ofb"
+  NID_rc5_ofb64* = 123
+  SN_ms_ext_req* = "msExtReq"
+  LN_ms_ext_req* = "Microsoft Extension Request"
+  NID_ms_ext_req* = 171
+  SN_ms_code_ind* = "msCodeInd"
+  LN_ms_code_ind* = "Microsoft Individual Code Signing"
+  NID_ms_code_ind* = 134
+  SN_ms_code_com* = "msCodeCom"
+  LN_ms_code_com* = "Microsoft Commercial Code Signing"
+  NID_ms_code_com* = 135
+  SN_ms_ctl_sign* = "msCTLSign"
+  LN_ms_ctl_sign* = "Microsoft Trust List Signing"
+  NID_ms_ctl_sign* = 136
+  SN_ms_sgc* = "msSGC"
+  LN_ms_sgc* = "Microsoft Server Gated Crypto"
+  NID_ms_sgc* = 137
+  SN_ms_efs* = "msEFS"
+  LN_ms_efs* = "Microsoft Encrypted File System"
+  NID_ms_efs* = 138
+  SN_ms_smartcard_login* = "msSmartcardLogin"
+  LN_ms_smartcard_login* = "Microsoft Smartcard Login"
+  NID_ms_smartcard_login* = 648
+  SN_ms_upn* = "msUPN"
+  LN_ms_upn* = "Microsoft User Principal Name"
+  NID_ms_upn* = 649
+  SN_ms_ntds_sec_ext* = "ms-ntds-sec-ext"
+  LN_ms_ntds_sec_ext* = "Microsoft NTDS CA Extension"
+  NID_ms_ntds_sec_ext* = 1292
+  SN_ms_ntds_obj_sid* = "ms-ntds-obj-sid"
+  LN_ms_ntds_obj_sid* = "Microsoft NTDS AD objectSid"
+  NID_ms_ntds_obj_sid* = 1291
+  SN_ms_cert_templ* = "ms-cert-templ"
+  LN_ms_cert_templ* = "Microsoft certificate template"
+  NID_ms_cert_templ* = 1293
+  SN_ms_app_policies* = "ms-app-policies"
+  LN_ms_app_policies* = "Microsoft Application Policies Extension"
+  NID_ms_app_policies* = 1294
+  SN_idea_cbc* = "IDEA-CBC"
+  LN_idea_cbc* = "idea-cbc"
+  NID_idea_cbc* = 34
+  SN_idea_ecb* = "IDEA-ECB"
+  LN_idea_ecb* = "idea-ecb"
+  NID_idea_ecb* = 36
+  SN_idea_cfb64* = "IDEA-CFB"
+  LN_idea_cfb64* = "idea-cfb"
+  NID_idea_cfb64* = 35
+  SN_idea_ofb64* = "IDEA-OFB"
+  LN_idea_ofb64* = "idea-ofb"
+  NID_idea_ofb64* = 46
+  SN_bf_cbc* = "BF-CBC"
+  LN_bf_cbc* = "bf-cbc"
+  NID_bf_cbc* = 91
+  SN_bf_ecb* = "BF-ECB"
+  LN_bf_ecb* = "bf-ecb"
+  NID_bf_ecb* = 92
+  SN_bf_cfb64* = "BF-CFB"
+  LN_bf_cfb64* = "bf-cfb"
+  NID_bf_cfb64* = 93
+  SN_bf_ofb64* = "BF-OFB"
+  LN_bf_ofb64* = "bf-ofb"
+  NID_bf_ofb64* = 94
+  SN_id_pkix* = "PKIX"
+  NID_id_pkix* = 127
+  SN_id_pkix_mod* = "id-pkix-mod"
+  NID_id_pkix_mod* = 258
+  SN_id_pe* = "id-pe"
+  NID_id_pe* = 175
+  SN_id_qt* = "id-qt"
+  NID_id_qt* = 259
+  SN_id_kp* = "id-kp"
+  NID_id_kp* = 128
+  SN_id_it* = "id-it"
+  NID_id_it* = 260
+  SN_id_pkip* = "id-pkip"
+  NID_id_pkip* = 261
+  SN_id_alg* = "id-alg"
+  NID_id_alg* = 262
+  SN_id_cmc* = "id-cmc"
+  NID_id_cmc* = 263
+  SN_id_on* = "id-on"
+  NID_id_on* = 264
+  SN_id_pda* = "id-pda"
+  NID_id_pda* = 265
+  SN_id_aca* = "id-aca"
+  NID_id_aca* = 266
+  SN_id_qcs* = "id-qcs"
+  NID_id_qcs* = 267
+  SN_id_cp* = "id-cp"
+  NID_id_cp* = 1238
+  SN_id_cct* = "id-cct"
+  NID_id_cct* = 268
+  SN_id_ppl* = "id-ppl"
+  NID_id_ppl* = 662
+  SN_id_ad* = "id-ad"
+  NID_id_ad* = 176
+  SN_id_pkix1_explicit_88* = "id-pkix1-explicit-88"
+  NID_id_pkix1_explicit_88* = 269
+  SN_id_pkix1_implicit_88* = "id-pkix1-implicit-88"
+  NID_id_pkix1_implicit_88* = 270
+  SN_id_pkix1_explicit_93* = "id-pkix1-explicit-93"
+  NID_id_pkix1_explicit_93* = 271
+  SN_id_pkix1_implicit_93* = "id-pkix1-implicit-93"
+  NID_id_pkix1_implicit_93* = 272
+  SN_id_mod_crmf* = "id-mod-crmf"
+  NID_id_mod_crmf* = 273
+  SN_id_mod_cmc* = "id-mod-cmc"
+  NID_id_mod_cmc* = 274
+  SN_id_mod_kea_profile_88* = "id-mod-kea-profile-88"
+  NID_id_mod_kea_profile_88* = 275
+  SN_id_mod_kea_profile_93* = "id-mod-kea-profile-93"
+  NID_id_mod_kea_profile_93* = 276
+  SN_id_mod_cmp* = "id-mod-cmp"
+  NID_id_mod_cmp* = 277
+  SN_id_mod_qualified_cert_88* = "id-mod-qualified-cert-88"
+  NID_id_mod_qualified_cert_88* = 278
+  SN_id_mod_qualified_cert_93* = "id-mod-qualified-cert-93"
+  NID_id_mod_qualified_cert_93* = 279
+  SN_id_mod_attribute_cert* = "id-mod-attribute-cert"
+  NID_id_mod_attribute_cert* = 280
+  SN_id_mod_timestamp_protocol* = "id-mod-timestamp-protocol"
+  NID_id_mod_timestamp_protocol* = 281
+  SN_id_mod_ocsp* = "id-mod-ocsp"
+  NID_id_mod_ocsp* = 282
+  SN_id_mod_dvcs* = "id-mod-dvcs"
+  NID_id_mod_dvcs* = 283
+  SN_id_mod_cmp2000* = "id-mod-cmp2000"
+  NID_id_mod_cmp2000* = 284
+  SN_id_mod_cmp2000_02* = "id-mod-cmp2000-02"
+  NID_id_mod_cmp2000_02* = 1251
+  SN_id_mod_cmp2021_88* = "id-mod-cmp2021-88"
+  NID_id_mod_cmp2021_88* = 1252
+  SN_id_mod_cmp2021_02* = "id-mod-cmp2021-02"
+  NID_id_mod_cmp2021_02* = 1253
+  SN_info_access* = "authorityInfoAccess"
+  LN_info_access* = "Authority Information Access"
+  NID_info_access* = 177
+  SN_biometricInfo* = "biometricInfo"
+  LN_biometricInfo* = "Biometric Info"
+  NID_biometricInfo* = 285
+  SN_qcStatements* = "qcStatements"
+  NID_qcStatements* = 286
+  SN_ac_auditEntity* = "ac-auditEntity"
+  NID_ac_auditEntity* = 287
+  SN_ac_targeting* = "ac-targeting"
+  NID_ac_targeting* = 288
+  SN_aaControls* = "aaControls"
+  NID_aaControls* = 289
+  SN_sbgp_ipAddrBlock* = "sbgp-ipAddrBlock"
+  NID_sbgp_ipAddrBlock* = 290
+  SN_sbgp_autonomousSysNum* = "sbgp-autonomousSysNum"
+  NID_sbgp_autonomousSysNum* = 291
+  SN_sbgp_routerIdentifier* = "sbgp-routerIdentifier"
+  NID_sbgp_routerIdentifier* = 292
+  SN_ac_proxying* = "ac-proxying"
+  NID_ac_proxying* = 397
+  SN_sinfo_access* = "subjectInfoAccess"
+  LN_sinfo_access* = "Subject Information Access"
+  NID_sinfo_access* = 398
+  SN_proxyCertInfo* = "proxyCertInfo"
+  LN_proxyCertInfo* = "Proxy Certificate Information"
+  NID_proxyCertInfo* = 663
+  SN_tlsfeature* = "tlsfeature"
+  LN_tlsfeature* = "TLS Feature"
+  NID_tlsfeature* = 1020
+  SN_sbgp_ipAddrBlockv2* = "sbgp-ipAddrBlockv2"
+  NID_sbgp_ipAddrBlockv2* = 1239
+  SN_sbgp_autonomousSysNumv2* = "sbgp-autonomousSysNumv2"
+  NID_sbgp_autonomousSysNumv2* = 1240
+  SN_id_qt_cps* = "id-qt-cps"
+  LN_id_qt_cps* = "Policy Qualifier CPS"
+  NID_id_qt_cps* = 164
+  SN_id_qt_unotice* = "id-qt-unotice"
+  LN_id_qt_unotice* = "Policy Qualifier User Notice"
+  NID_id_qt_unotice* = 165
+  SN_textNotice* = "textNotice"
+  NID_textNotice* = 293
+  SN_server_auth* = "serverAuth"
+  LN_server_auth* = "TLS Web Server Authentication"
+  NID_server_auth* = 129
+  SN_client_auth* = "clientAuth"
+  LN_client_auth* = "TLS Web Client Authentication"
+  NID_client_auth* = 130
+  SN_code_sign* = "codeSigning"
+  LN_code_sign* = "Code Signing"
+  NID_code_sign* = 131
+  SN_email_protect* = "emailProtection"
+  LN_email_protect* = "E-mail Protection"
+  NID_email_protect* = 132
+  SN_ipsecEndSystem* = "ipsecEndSystem"
+  LN_ipsecEndSystem* = "IPSec End System"
+  NID_ipsecEndSystem* = 294
+  SN_ipsecTunnel* = "ipsecTunnel"
+  LN_ipsecTunnel* = "IPSec Tunnel"
+  NID_ipsecTunnel* = 295
+  SN_ipsecUser* = "ipsecUser"
+  LN_ipsecUser* = "IPSec User"
+  NID_ipsecUser* = 296
+  SN_time_stamp* = "timeStamping"
+  LN_time_stamp* = "Time Stamping"
+  NID_time_stamp* = 133
+  SN_OCSP_sign* = "OCSPSigning"
+  LN_OCSP_sign* = "OCSP Signing"
+  NID_OCSP_sign* = 180
+  SN_dvcs* = "DVCS"
+  LN_dvcs* = "dvcs"
+  NID_dvcs* = 297
+  SN_ipsec_IKE* = "ipsecIKE"
+  LN_ipsec_IKE* = "ipsec Internet Key Exchange"
+  NID_ipsec_IKE* = 1022
+  SN_capwapAC* = "capwapAC"
+  LN_capwapAC* = "Ctrl/provision WAP Access"
+  NID_capwapAC* = 1023
+  SN_capwapWTP* = "capwapWTP"
+  LN_capwapWTP* = "Ctrl/Provision WAP Termination"
+  NID_capwapWTP* = 1024
+  SN_sshClient* = "secureShellClient"
+  LN_sshClient* = "SSH Client"
+  NID_sshClient* = 1025
+  SN_sshServer* = "secureShellServer"
+  LN_sshServer* = "SSH Server"
+  NID_sshServer* = 1026
+  SN_sendRouter* = "sendRouter"
+  LN_sendRouter* = "Send Router"
+  NID_sendRouter* = 1027
+  SN_sendProxiedRouter* = "sendProxiedRouter"
+  LN_sendProxiedRouter* = "Send Proxied Router"
+  NID_sendProxiedRouter* = 1028
+  SN_sendOwner* = "sendOwner"
+  LN_sendOwner* = "Send Owner"
+  NID_sendOwner* = 1029
+  SN_sendProxiedOwner* = "sendProxiedOwner"
+  LN_sendProxiedOwner* = "Send Proxied Owner"
+  NID_sendProxiedOwner* = 1030
+  SN_cmcCA* = "cmcCA"
+  LN_cmcCA* = "CMC Certificate Authority"
+  NID_cmcCA* = 1131
+  SN_cmcRA* = "cmcRA"
+  LN_cmcRA* = "CMC Registration Authority"
+  NID_cmcRA* = 1132
+  SN_cmcArchive* = "cmcArchive"
+  LN_cmcArchive* = "CMC Archive Server"
+  NID_cmcArchive* = 1219
+  SN_id_kp_bgpsec_router* = "id-kp-bgpsec-router"
+  LN_id_kp_bgpsec_router* = "BGPsec Router"
+  NID_id_kp_bgpsec_router* = 1220
+  SN_id_kp_BrandIndicatorforMessageIdentification* = "id-kp-BrandIndicatorforMessageIdentification"
+  LN_id_kp_BrandIndicatorforMessageIdentification* = "Brand Indicator for Message Identification"
+  NID_id_kp_BrandIndicatorforMessageIdentification* = 1221
+  SN_cmKGA* = "cmKGA"
+  LN_cmKGA* = "Certificate Management Key Generation Authority"
+  NID_cmKGA* = 1222
+  SN_id_it_caProtEncCert* = "id-it-caProtEncCert"
+  NID_id_it_caProtEncCert* = 298
+  SN_id_it_signKeyPairTypes* = "id-it-signKeyPairTypes"
+  NID_id_it_signKeyPairTypes* = 299
+  SN_id_it_encKeyPairTypes* = "id-it-encKeyPairTypes"
+  NID_id_it_encKeyPairTypes* = 300
+  SN_id_it_preferredSymmAlg* = "id-it-preferredSymmAlg"
+  NID_id_it_preferredSymmAlg* = 301
+  SN_id_it_caKeyUpdateInfo* = "id-it-caKeyUpdateInfo"
+  NID_id_it_caKeyUpdateInfo* = 302
+  SN_id_it_currentCRL* = "id-it-currentCRL"
+  NID_id_it_currentCRL* = 303
+  SN_id_it_unsupportedOIDs* = "id-it-unsupportedOIDs"
+  NID_id_it_unsupportedOIDs* = 304
+  SN_id_it_subscriptionRequest* = "id-it-subscriptionRequest"
+  NID_id_it_subscriptionRequest* = 305
+  SN_id_it_subscriptionResponse* = "id-it-subscriptionResponse"
+  NID_id_it_subscriptionResponse* = 306
+  SN_id_it_keyPairParamReq* = "id-it-keyPairParamReq"
+  NID_id_it_keyPairParamReq* = 307
+  SN_id_it_keyPairParamRep* = "id-it-keyPairParamRep"
+  NID_id_it_keyPairParamRep* = 308
+  SN_id_it_revPassphrase* = "id-it-revPassphrase"
+  NID_id_it_revPassphrase* = 309
+  SN_id_it_implicitConfirm* = "id-it-implicitConfirm"
+  NID_id_it_implicitConfirm* = 310
+  SN_id_it_confirmWaitTime* = "id-it-confirmWaitTime"
+  NID_id_it_confirmWaitTime* = 311
+  SN_id_it_origPKIMessage* = "id-it-origPKIMessage"
+  NID_id_it_origPKIMessage* = 312
+  SN_id_it_suppLangTags* = "id-it-suppLangTags"
+  NID_id_it_suppLangTags* = 784
+  SN_id_it_caCerts* = "id-it-caCerts"
+  NID_id_it_caCerts* = 1223
+  SN_id_it_rootCaKeyUpdate* = "id-it-rootCaKeyUpdate"
+  NID_id_it_rootCaKeyUpdate* = 1224
+  SN_id_it_certReqTemplate* = "id-it-certReqTemplate"
+  NID_id_it_certReqTemplate* = 1225
+  SN_id_it_rootCaCert* = "id-it-rootCaCert"
+  NID_id_it_rootCaCert* = 1254
+  SN_id_it_certProfile* = "id-it-certProfile"
+  NID_id_it_certProfile* = 1255
+  SN_id_it_crlStatusList* = "id-it-crlStatusList"
+  NID_id_it_crlStatusList* = 1256
+  SN_id_it_crls* = "id-it-crls"
+  NID_id_it_crls* = 1257
+  SN_id_regCtrl* = "id-regCtrl"
+  NID_id_regCtrl* = 313
+  SN_id_regInfo* = "id-regInfo"
+  NID_id_regInfo* = 314
+  SN_id_regCtrl_regToken* = "id-regCtrl-regToken"
+  NID_id_regCtrl_regToken* = 315
+  SN_id_regCtrl_authenticator* = "id-regCtrl-authenticator"
+  NID_id_regCtrl_authenticator* = 316
+  SN_id_regCtrl_pkiPublicationInfo* = "id-regCtrl-pkiPublicationInfo"
+  NID_id_regCtrl_pkiPublicationInfo* = 317
+  SN_id_regCtrl_pkiArchiveOptions* = "id-regCtrl-pkiArchiveOptions"
+  NID_id_regCtrl_pkiArchiveOptions* = 318
+  SN_id_regCtrl_oldCertID* = "id-regCtrl-oldCertID"
+  NID_id_regCtrl_oldCertID* = 319
+  SN_id_regCtrl_protocolEncrKey* = "id-regCtrl-protocolEncrKey"
+  NID_id_regCtrl_protocolEncrKey* = 320
+  SN_id_regCtrl_altCertTemplate* = "id-regCtrl-altCertTemplate"
+  NID_id_regCtrl_altCertTemplate* = 1258
+  SN_id_regCtrl_algId* = "id-regCtrl-algId"
+  NID_id_regCtrl_algId* = 1259
+  SN_id_regCtrl_rsaKeyLen* = "id-regCtrl-rsaKeyLen"
+  NID_id_regCtrl_rsaKeyLen* = 1260
+  SN_id_regInfo_utf8Pairs* = "id-regInfo-utf8Pairs"
+  NID_id_regInfo_utf8Pairs* = 321
+  SN_id_regInfo_certReq* = "id-regInfo-certReq"
+  NID_id_regInfo_certReq* = 322
+  SN_id_alg_des40* = "id-alg-des40"
+  NID_id_alg_des40* = 323
+  SN_id_alg_noSignature* = "id-alg-noSignature"
+  NID_id_alg_noSignature* = 324
+  SN_id_alg_dh_sig_hmac_sha1* = "id-alg-dh-sig-hmac-sha1"
+  NID_id_alg_dh_sig_hmac_sha1* = 325
+  SN_id_alg_dh_pop* = "id-alg-dh-pop"
+  NID_id_alg_dh_pop* = 326
+  SN_id_cmc_statusInfo* = "id-cmc-statusInfo"
+  NID_id_cmc_statusInfo* = 327
+  SN_id_cmc_identification* = "id-cmc-identification"
+  NID_id_cmc_identification* = 328
+  SN_id_cmc_identityProof* = "id-cmc-identityProof"
+  NID_id_cmc_identityProof* = 329
+  SN_id_cmc_dataReturn* = "id-cmc-dataReturn"
+  NID_id_cmc_dataReturn* = 330
+  SN_id_cmc_transactionId* = "id-cmc-transactionId"
+  NID_id_cmc_transactionId* = 331
+  SN_id_cmc_senderNonce* = "id-cmc-senderNonce"
+  NID_id_cmc_senderNonce* = 332
+  SN_id_cmc_recipientNonce* = "id-cmc-recipientNonce"
+  NID_id_cmc_recipientNonce* = 333
+  SN_id_cmc_addExtensions* = "id-cmc-addExtensions"
+  NID_id_cmc_addExtensions* = 334
+  SN_id_cmc_encryptedPOP* = "id-cmc-encryptedPOP"
+  NID_id_cmc_encryptedPOP* = 335
+  SN_id_cmc_decryptedPOP* = "id-cmc-decryptedPOP"
+  NID_id_cmc_decryptedPOP* = 336
+  SN_id_cmc_lraPOPWitness* = "id-cmc-lraPOPWitness"
+  NID_id_cmc_lraPOPWitness* = 337
+  SN_id_cmc_getCert* = "id-cmc-getCert"
+  NID_id_cmc_getCert* = 338
+  SN_id_cmc_getCRL* = "id-cmc-getCRL"
+  NID_id_cmc_getCRL* = 339
+  SN_id_cmc_revokeRequest* = "id-cmc-revokeRequest"
+  NID_id_cmc_revokeRequest* = 340
+  SN_id_cmc_regInfo* = "id-cmc-regInfo"
+  NID_id_cmc_regInfo* = 341
+  SN_id_cmc_responseInfo* = "id-cmc-responseInfo"
+  NID_id_cmc_responseInfo* = 342
+  SN_id_cmc_queryPending* = "id-cmc-queryPending"
+  NID_id_cmc_queryPending* = 343
+  SN_id_cmc_popLinkRandom* = "id-cmc-popLinkRandom"
+  NID_id_cmc_popLinkRandom* = 344
+  SN_id_cmc_popLinkWitness* = "id-cmc-popLinkWitness"
+  NID_id_cmc_popLinkWitness* = 345
+  SN_id_cmc_confirmCertAcceptance* = "id-cmc-confirmCertAcceptance"
+  NID_id_cmc_confirmCertAcceptance* = 346
+  SN_id_on_personalData* = "id-on-personalData"
+  NID_id_on_personalData* = 347
+  SN_id_on_permanentIdentifier* = "id-on-permanentIdentifier"
+  LN_id_on_permanentIdentifier* = "Permanent Identifier"
+  NID_id_on_permanentIdentifier* = 858
+  SN_XmppAddr* = "id-on-xmppAddr"
+  LN_XmppAddr* = "XmppAddr"
+  NID_XmppAddr* = 1209
+  SN_SRVName* = "id-on-dnsSRV"
+  LN_SRVName* = "SRVName"
+  NID_SRVName* = 1210
+  SN_NAIRealm* = "id-on-NAIRealm"
+  LN_NAIRealm* = "NAIRealm"
+  NID_NAIRealm* = 1211
+  SN_id_on_SmtpUTF8Mailbox* = "id-on-SmtpUTF8Mailbox"
+  LN_id_on_SmtpUTF8Mailbox* = "Smtp UTF8 Mailbox"
+  NID_id_on_SmtpUTF8Mailbox* = 1208
+  SN_id_pda_dateOfBirth* = "id-pda-dateOfBirth"
+  NID_id_pda_dateOfBirth* = 348
+  SN_id_pda_placeOfBirth* = "id-pda-placeOfBirth"
+  NID_id_pda_placeOfBirth* = 349
+  SN_id_pda_gender* = "id-pda-gender"
+  NID_id_pda_gender* = 351
+  SN_id_pda_countryOfCitizenship* = "id-pda-countryOfCitizenship"
+  NID_id_pda_countryOfCitizenship* = 352
+  SN_id_pda_countryOfResidence* = "id-pda-countryOfResidence"
+  NID_id_pda_countryOfResidence* = 353
+  SN_id_aca_authenticationInfo* = "id-aca-authenticationInfo"
+  NID_id_aca_authenticationInfo* = 354
+  SN_id_aca_accessIdentity* = "id-aca-accessIdentity"
+  NID_id_aca_accessIdentity* = 355
+  SN_id_aca_chargingIdentity* = "id-aca-chargingIdentity"
+  NID_id_aca_chargingIdentity* = 356
+  SN_id_aca_group* = "id-aca-group"
+  NID_id_aca_group* = 357
+  SN_id_aca_role* = "id-aca-role"
+  NID_id_aca_role* = 358
+  SN_id_aca_encAttrs* = "id-aca-encAttrs"
+  NID_id_aca_encAttrs* = 399
+  SN_id_qcs_pkixQCSyntax_v1* = "id-qcs-pkixQCSyntax-v1"
+  NID_id_qcs_pkixQCSyntax_v1* = 359
+  SN_ipAddr_asNumber* = "ipAddr-asNumber"
+  NID_ipAddr_asNumber* = 1241
+  SN_ipAddr_asNumberv2* = "ipAddr-asNumberv2"
+  NID_ipAddr_asNumberv2* = 1242
+  SN_id_cct_crs* = "id-cct-crs"
+  NID_id_cct_crs* = 360
+  SN_id_cct_PKIData* = "id-cct-PKIData"
+  NID_id_cct_PKIData* = 361
+  SN_id_cct_PKIResponse* = "id-cct-PKIResponse"
+  NID_id_cct_PKIResponse* = 362
+  SN_id_ppl_anyLanguage* = "id-ppl-anyLanguage"
+  LN_id_ppl_anyLanguage* = "Any language"
+  NID_id_ppl_anyLanguage* = 664
+  SN_id_ppl_inheritAll* = "id-ppl-inheritAll"
+  LN_id_ppl_inheritAll* = "Inherit all"
+  NID_id_ppl_inheritAll* = 665
+  SN_Independent* = "id-ppl-independent"
+  LN_Independent* = "Independent"
+  NID_Independent* = 667
+  SN_ad_OCSP* = "OCSP"
+  LN_ad_OCSP* = "OCSP"
+  NID_ad_OCSP* = 178
+  SN_ad_ca_issuers* = "caIssuers"
+  LN_ad_ca_issuers* = "CA Issuers"
+  NID_ad_ca_issuers* = 179
+  SN_ad_timeStamping* = "ad_timestamping"
+  LN_ad_timeStamping* = "AD Time Stamping"
+  NID_ad_timeStamping* = 363
+  SN_ad_dvcs* = "AD_DVCS"
+  LN_ad_dvcs* = "ad dvcs"
+  NID_ad_dvcs* = 364
+  SN_caRepository* = "caRepository"
+  LN_caRepository* = "CA Repository"
+  NID_caRepository* = 785
+  SN_rpkiManifest* = "rpkiManifest"
+  LN_rpkiManifest* = "RPKI Manifest"
+  NID_rpkiManifest* = 1243
+  SN_signedObject* = "signedObject"
+  LN_signedObject* = "Signed Object"
+  NID_signedObject* = 1244
+  SN_rpkiNotify* = "rpkiNotify"
+  LN_rpkiNotify* = "RPKI Notify"
+  NID_rpkiNotify* = 1245
+  SN_id_pkix_OCSP_basic* = "basicOCSPResponse"
+  LN_id_pkix_OCSP_basic* = "Basic OCSP Response"
+  NID_id_pkix_OCSP_basic* = 365
+  SN_id_pkix_OCSP_Nonce* = "Nonce"
+  LN_id_pkix_OCSP_Nonce* = "OCSP Nonce"
+  NID_id_pkix_OCSP_Nonce* = 366
+  SN_id_pkix_OCSP_CrlID* = "CrlID"
+  LN_id_pkix_OCSP_CrlID* = "OCSP CRL ID"
+  NID_id_pkix_OCSP_CrlID* = 367
+  SN_id_pkix_OCSP_acceptableResponses* = "acceptableResponses"
+  LN_id_pkix_OCSP_acceptableResponses* = "Acceptable OCSP Responses"
+  NID_id_pkix_OCSP_acceptableResponses* = 368
+  SN_id_pkix_OCSP_noCheck* = "noCheck"
+  LN_id_pkix_OCSP_noCheck* = "OCSP No Check"
+  NID_id_pkix_OCSP_noCheck* = 369
+  SN_id_pkix_OCSP_archiveCutoff* = "archiveCutoff"
+  LN_id_pkix_OCSP_archiveCutoff* = "OCSP Archive Cutoff"
+  NID_id_pkix_OCSP_archiveCutoff* = 370
+  SN_id_pkix_OCSP_serviceLocator* = "serviceLocator"
+  LN_id_pkix_OCSP_serviceLocator* = "OCSP Service Locator"
+  NID_id_pkix_OCSP_serviceLocator* = 371
+  SN_id_pkix_OCSP_extendedStatus* = "extendedStatus"
+  LN_id_pkix_OCSP_extendedStatus* = "Extended OCSP Status"
+  NID_id_pkix_OCSP_extendedStatus* = 372
+  SN_id_pkix_OCSP_valid* = "valid"
+  NID_id_pkix_OCSP_valid* = 373
+  SN_id_pkix_OCSP_path* = "path"
+  NID_id_pkix_OCSP_path* = 374
+  SN_id_pkix_OCSP_trustRoot* = "trustRoot"
+  LN_id_pkix_OCSP_trustRoot* = "Trust Root"
+  NID_id_pkix_OCSP_trustRoot* = 375
+  SN_algorithm* = "algorithm"
+  LN_algorithm* = "algorithm"
+  NID_algorithm* = 376
+  SN_md5WithRSA* = "RSA-NP-MD5"
+  LN_md5WithRSA* = "md5WithRSA"
+  NID_md5WithRSA* = 104
+  SN_des_ecb* = "DES-ECB"
+  LN_des_ecb* = "des-ecb"
+  NID_des_ecb* = 29
+  SN_des_cbc* = "DES-CBC"
+  LN_des_cbc* = "des-cbc"
+  NID_des_cbc* = 31
+  SN_des_ofb64* = "DES-OFB"
+  LN_des_ofb64* = "des-ofb"
+  NID_des_ofb64* = 45
+  SN_des_cfb64* = "DES-CFB"
+  LN_des_cfb64* = "des-cfb"
+  NID_des_cfb64* = 30
+  SN_rsaSignature* = "rsaSignature"
+  NID_rsaSignature* = 377
+  SN_dsa_2* = "DSA-old"
+  LN_dsa_2* = "dsaEncryption-old"
+  NID_dsa_2* = 67
+  SN_dsaWithSHA* = "DSA-SHA"
+  LN_dsaWithSHA* = "dsaWithSHA"
+  NID_dsaWithSHA* = 66
+  SN_shaWithRSAEncryption* = "RSA-SHA"
+  LN_shaWithRSAEncryption* = "shaWithRSAEncryption"
+  NID_shaWithRSAEncryption* = 42
+  SN_des_ede_ecb* = "DES-EDE"
+  LN_des_ede_ecb* = "des-ede"
+  NID_des_ede_ecb* = 32
+  SN_des_ede3_ecb* = "DES-EDE3"
+  LN_des_ede3_ecb* = "des-ede3"
+  NID_des_ede3_ecb* = 33
+  SN_des_ede_cbc* = "DES-EDE-CBC"
+  LN_des_ede_cbc* = "des-ede-cbc"
+  NID_des_ede_cbc* = 43
+  SN_des_ede_cfb64* = "DES-EDE-CFB"
+  LN_des_ede_cfb64* = "des-ede-cfb"
+  NID_des_ede_cfb64* = 60
+  SN_des_ede3_cfb64* = "DES-EDE3-CFB"
+  LN_des_ede3_cfb64* = "des-ede3-cfb"
+  NID_des_ede3_cfb64* = 61
+  SN_des_ede_ofb64* = "DES-EDE-OFB"
+  LN_des_ede_ofb64* = "des-ede-ofb"
+  NID_des_ede_ofb64* = 62
+  SN_des_ede3_ofb64* = "DES-EDE3-OFB"
+  LN_des_ede3_ofb64* = "des-ede3-ofb"
+  NID_des_ede3_ofb64* = 63
+  SN_desx_cbc* = "DESX-CBC"
+  LN_desx_cbc* = "desx-cbc"
+  NID_desx_cbc* = 80
+  SN_sha* = "SHA"
+  LN_sha* = "sha"
+  NID_sha* = 41
+  SN_sha1* = "SHA1"
+  LN_sha1* = "sha1"
+  NID_sha1* = 64
+  SN_dsaWithSHA1_2* = "DSA-SHA1-old"
+  LN_dsaWithSHA1_2* = "dsaWithSHA1-old"
+  NID_dsaWithSHA1_2* = 70
+  SN_sha1WithRSA* = "RSA-SHA1-2"
+  LN_sha1WithRSA* = "sha1WithRSA"
+  NID_sha1WithRSA* = 115
+  SN_ripemd160* = "RIPEMD160"
+  LN_ripemd160* = "ripemd160"
+  NID_ripemd160* = 117
+  SN_ripemd160WithRSA* = "RSA-RIPEMD160"
+  LN_ripemd160WithRSA* = "ripemd160WithRSA"
+  NID_ripemd160WithRSA* = 119
+  SN_blake2bmac* = "BLAKE2BMAC"
+  LN_blake2bmac* = "blake2bmac"
+  NID_blake2bmac* = 1201
+  SN_blake2smac* = "BLAKE2SMAC"
+  LN_blake2smac* = "blake2smac"
+  NID_blake2smac* = 1202
+  SN_blake2b512* = "BLAKE2b512"
+  LN_blake2b512* = "blake2b512"
+  NID_blake2b512* = 1056
+  SN_blake2s256* = "BLAKE2s256"
+  LN_blake2s256* = "blake2s256"
+  NID_blake2s256* = 1057
+  SN_sxnet* = "SXNetID"
+  LN_sxnet* = "Strong Extranet ID"
+  NID_sxnet* = 143
+  SN_X500* = "X500"
+  LN_X500* = "directory services (X.500)"
+  NID_X500* = 11
+  SN_X509* = "X509"
+  NID_X509* = 12
+  SN_commonName* = "CN"
+  LN_commonName* = "commonName"
+  NID_commonName* = 13
+  SN_surname* = "SN"
+  LN_surname* = "surname"
+  NID_surname* = 100
+  LN_serialNumber* = "serialNumber"
+  NID_serialNumber* = 105
+  SN_countryName* = "C"
+  LN_countryName* = "countryName"
+  NID_countryName* = 14
+  SN_localityName* = "L"
+  LN_localityName* = "localityName"
+  NID_localityName* = 15
+  SN_stateOrProvinceName* = "ST"
+  LN_stateOrProvinceName* = "stateOrProvinceName"
+  NID_stateOrProvinceName* = 16
+  SN_streetAddress* = "street"
+  LN_streetAddress* = "streetAddress"
+  NID_streetAddress* = 660
+  SN_organizationName* = "O"
+  LN_organizationName* = "organizationName"
+  NID_organizationName* = 17
+  SN_organizationalUnitName* = "OU"
+  LN_organizationalUnitName* = "organizationalUnitName"
+  NID_organizationalUnitName* = 18
+  SN_title* = "title"
+  LN_title* = "title"
+  NID_title* = 106
+  LN_description* = "description"
+  NID_description* = 107
+  LN_searchGuide* = "searchGuide"
+  NID_searchGuide* = 859
+  LN_businessCategory* = "businessCategory"
+  NID_businessCategory* = 860
+  LN_postalAddress* = "postalAddress"
+  NID_postalAddress* = 861
+  LN_postalCode* = "postalCode"
+  NID_postalCode* = 661
+  LN_postOfficeBox* = "postOfficeBox"
+  NID_postOfficeBox* = 862
+  LN_physicalDeliveryOfficeName* = "physicalDeliveryOfficeName"
+  NID_physicalDeliveryOfficeName* = 863
+  LN_telephoneNumber* = "telephoneNumber"
+  NID_telephoneNumber* = 864
+  LN_telexNumber* = "telexNumber"
+  NID_telexNumber* = 865
+  LN_teletexTerminalIdentifier* = "teletexTerminalIdentifier"
+  NID_teletexTerminalIdentifier* = 866
+  LN_facsimileTelephoneNumber* = "facsimileTelephoneNumber"
+  NID_facsimileTelephoneNumber* = 867
+  LN_x121Address* = "x121Address"
+  NID_x121Address* = 868
+  LN_internationaliSDNNumber* = "internationaliSDNNumber"
+  NID_internationaliSDNNumber* = 869
+  LN_registeredAddress* = "registeredAddress"
+  NID_registeredAddress* = 870
+  LN_destinationIndicator* = "destinationIndicator"
+  NID_destinationIndicator* = 871
+  LN_preferredDeliveryMethod* = "preferredDeliveryMethod"
+  NID_preferredDeliveryMethod* = 872
+  LN_presentationAddress* = "presentationAddress"
+  NID_presentationAddress* = 873
+  LN_supportedApplicationContext* = "supportedApplicationContext"
+  NID_supportedApplicationContext* = 874
+  SN_member* = "member"
+  NID_member* = 875
+  SN_owner* = "owner"
+  NID_owner* = 876
+  LN_roleOccupant* = "roleOccupant"
+  NID_roleOccupant* = 877
+  SN_seeAlso* = "seeAlso"
+  NID_seeAlso* = 878
+  LN_userPassword* = "userPassword"
+  NID_userPassword* = 879
+  LN_userCertificate* = "userCertificate"
+  NID_userCertificate* = 880
+  LN_cACertificate* = "cACertificate"
+  NID_cACertificate* = 881
+  LN_authorityRevocationList* = "authorityRevocationList"
+  NID_authorityRevocationList* = 882
+  LN_certificateRevocationList* = "certificateRevocationList"
+  NID_certificateRevocationList* = 883
+  LN_crossCertificatePair* = "crossCertificatePair"
+  NID_crossCertificatePair* = 884
+  SN_name* = "name"
+  LN_name* = "name"
+  NID_name* = 173
+  SN_givenName* = "GN"
+  LN_givenName* = "givenName"
+  NID_givenName* = 99
+  SN_initials* = "initials"
+  LN_initials* = "initials"
+  NID_initials* = 101
+  LN_generationQualifier* = "generationQualifier"
+  NID_generationQualifier* = 509
+  LN_x500UniqueIdentifier* = "x500UniqueIdentifier"
+  NID_x500UniqueIdentifier* = 503
+  SN_dnQualifier* = "dnQualifier"
+  LN_dnQualifier* = "dnQualifier"
+  NID_dnQualifier* = 174
+  LN_enhancedSearchGuide* = "enhancedSearchGuide"
+  NID_enhancedSearchGuide* = 885
+  LN_protocolInformation* = "protocolInformation"
+  NID_protocolInformation* = 886
+  LN_distinguishedName* = "distinguishedName"
+  NID_distinguishedName* = 887
+  LN_uniqueMember* = "uniqueMember"
+  NID_uniqueMember* = 888
+  LN_houseIdentifier* = "houseIdentifier"
+  NID_houseIdentifier* = 889
+  LN_supportedAlgorithms* = "supportedAlgorithms"
+  NID_supportedAlgorithms* = 890
+  LN_deltaRevocationList* = "deltaRevocationList"
+  NID_deltaRevocationList* = 891
+  SN_dmdName* = "dmdName"
+  NID_dmdName* = 892
+  LN_pseudonym* = "pseudonym"
+  NID_pseudonym* = 510
+  SN_role* = "role"
+  LN_role* = "role"
+  NID_role* = 400
+  LN_organizationIdentifier* = "organizationIdentifier"
+  NID_organizationIdentifier* = 1089
+  SN_countryCode3c* = "c3"
+  LN_countryCode3c* = "countryCode3c"
+  NID_countryCode3c* = 1090
+  SN_countryCode3n* = "n3"
+  LN_countryCode3n* = "countryCode3n"
+  NID_countryCode3n* = 1091
+  LN_dnsName* = "dnsName"
+  NID_dnsName* = 1092
+  SN_X500algorithms* = "X500algorithms"
+  LN_X500algorithms* = "directory services - algorithms"
+  NID_X500algorithms* = 378
+  SN_rsa* = "RSA"
+  LN_rsa* = "rsa"
+  NID_rsa* = 19
+  SN_mdc2WithRSA* = "RSA-MDC2"
+  LN_mdc2WithRSA* = "mdc2WithRSA"
+  NID_mdc2WithRSA* = 96
+  SN_mdc2* = "MDC2"
+  LN_mdc2* = "mdc2"
+  NID_mdc2* = 95
+  SN_id_ce* = "id-ce"
+  NID_id_ce* = 81
+  SN_subject_directory_attributes* = "subjectDirectoryAttributes"
+  LN_subject_directory_attributes* = "X509v3 Subject Directory Attributes"
+  NID_subject_directory_attributes* = 769
+  SN_subject_key_identifier* = "subjectKeyIdentifier"
+  LN_subject_key_identifier* = "X509v3 Subject Key Identifier"
+  NID_subject_key_identifier* = 82
+  SN_key_usage* = "keyUsage"
+  LN_key_usage* = "X509v3 Key Usage"
+  NID_key_usage* = 83
+  SN_private_key_usage_period* = "privateKeyUsagePeriod"
+  LN_private_key_usage_period* = "X509v3 Private Key Usage Period"
+  NID_private_key_usage_period* = 84
+  SN_subject_alt_name* = "subjectAltName"
+  LN_subject_alt_name* = "X509v3 Subject Alternative Name"
+  NID_subject_alt_name* = 85
+  SN_issuer_alt_name* = "issuerAltName"
+  LN_issuer_alt_name* = "X509v3 Issuer Alternative Name"
+  NID_issuer_alt_name* = 86
+  SN_basic_constraints* = "basicConstraints"
+  LN_basic_constraints* = "X509v3 Basic Constraints"
+  NID_basic_constraints* = 87
+  SN_crl_number* = "crlNumber"
+  LN_crl_number* = "X509v3 CRL Number"
+  NID_crl_number* = 88
+  SN_crl_reason* = "CRLReason"
+  LN_crl_reason* = "X509v3 CRL Reason Code"
+  NID_crl_reason* = 141
+  SN_invalidity_date* = "invalidityDate"
+  LN_invalidity_date* = "Invalidity Date"
+  NID_invalidity_date* = 142
+  SN_delta_crl* = "deltaCRL"
+  LN_delta_crl* = "X509v3 Delta CRL Indicator"
+  NID_delta_crl* = 140
+  SN_issuing_distribution_point* = "issuingDistributionPoint"
+  LN_issuing_distribution_point* = "X509v3 Issuing Distribution Point"
+  NID_issuing_distribution_point* = 770
+  SN_certificate_issuer* = "certificateIssuer"
+  LN_certificate_issuer* = "X509v3 Certificate Issuer"
+  NID_certificate_issuer* = 771
+  SN_name_constraints* = "nameConstraints"
+  LN_name_constraints* = "X509v3 Name Constraints"
+  NID_name_constraints* = 666
+  SN_crl_distribution_points* = "crlDistributionPoints"
+  LN_crl_distribution_points* = "X509v3 CRL Distribution Points"
+  NID_crl_distribution_points* = 103
+  SN_certificate_policies* = "certificatePolicies"
+  LN_certificate_policies* = "X509v3 Certificate Policies"
+  NID_certificate_policies* = 89
+  SN_any_policy* = "anyPolicy"
+  LN_any_policy* = "X509v3 Any Policy"
+  NID_any_policy* = 746
+  SN_policy_mappings* = "policyMappings"
+  LN_policy_mappings* = "X509v3 Policy Mappings"
+  NID_policy_mappings* = 747
+  SN_authority_key_identifier* = "authorityKeyIdentifier"
+  LN_authority_key_identifier* = "X509v3 Authority Key Identifier"
+  NID_authority_key_identifier* = 90
+  SN_policy_constraints* = "policyConstraints"
+  LN_policy_constraints* = "X509v3 Policy Constraints"
+  NID_policy_constraints* = 401
+  SN_ext_key_usage* = "extendedKeyUsage"
+  LN_ext_key_usage* = "X509v3 Extended Key Usage"
+  NID_ext_key_usage* = 126
+  SN_authority_attribute_identifier* = "authorityAttributeIdentifier"
+  LN_authority_attribute_identifier* = "X509v3 Authority Attribute Identifier"
+  NID_authority_attribute_identifier* = 1295
+  SN_role_spec_cert_identifier* = "roleSpecCertIdentifier"
+  LN_role_spec_cert_identifier* = "X509v3 Role Specification Certificate Identifier"
+  NID_role_spec_cert_identifier* = 1296
+  SN_basic_att_constraints* = "basicAttConstraints"
+  LN_basic_att_constraints* = "X509v3 Basic Attribute Certificate Constraints"
+  NID_basic_att_constraints* = 1297
+  SN_delegated_name_constraints* = "delegatedNameConstraints"
+  LN_delegated_name_constraints* = "X509v3 Delegated Name Constraints"
+  NID_delegated_name_constraints* = 1298
+  SN_time_specification* = "timeSpecification"
+  LN_time_specification* = "X509v3 Time Specification"
+  NID_time_specification* = 1299
+  SN_freshest_crl* = "freshestCRL"
+  LN_freshest_crl* = "X509v3 Freshest CRL"
+  NID_freshest_crl* = 857
+  SN_attribute_descriptor* = "attributeDescriptor"
+  LN_attribute_descriptor* = "X509v3 Attribute Descriptor"
+  NID_attribute_descriptor* = 1300
+  SN_user_notice* = "userNotice"
+  LN_user_notice* = "X509v3 User Notice"
+  NID_user_notice* = 1301
+  SN_soa_identifier* = "sOAIdentifier"
+  LN_soa_identifier* = "X509v3 Source of Authority Identifier"
+  NID_soa_identifier* = 1302
+  SN_acceptable_cert_policies* = "acceptableCertPolicies"
+  LN_acceptable_cert_policies* = "X509v3 Acceptable Certification Policies"
+  NID_acceptable_cert_policies* = 1303
+  SN_inhibit_any_policy* = "inhibitAnyPolicy"
+  LN_inhibit_any_policy* = "X509v3 Inhibit Any Policy"
+  NID_inhibit_any_policy* = 748
+  SN_target_information* = "targetInformation"
+  LN_target_information* = "X509v3 AC Targeting"
+  NID_target_information* = 402
+  SN_no_rev_avail* = "noRevAvail"
+  LN_no_rev_avail* = "X509v3 No Revocation Available"
+  NID_no_rev_avail* = 403
+  SN_acceptable_privilege_policies* = "acceptablePrivPolicies"
+  LN_acceptable_privilege_policies* = "X509v3 Acceptable Privilege Policies"
+  NID_acceptable_privilege_policies* = 1304
+  SN_indirect_issuer* = "indirectIssuer"
+  LN_indirect_issuer* = "X509v3 Indirect Issuer"
+  NID_indirect_issuer* = 1305
+  SN_no_assertion* = "noAssertion"
+  LN_no_assertion* = "X509v3 No Assertion"
+  NID_no_assertion* = 1306
+  SN_id_aa_issuing_distribution_point* = "aAissuingDistributionPoint"
+  LN_id_aa_issuing_distribution_point* = "X509v3 Attribute Authority Issuing Distribution Point"
+  NID_id_aa_issuing_distribution_point* = 1307
+  SN_issued_on_behalf_of* = "issuedOnBehalfOf"
+  LN_issued_on_behalf_of* = "X509v3 Issued On Behalf Of"
+  NID_issued_on_behalf_of* = 1308
+  SN_single_use* = "singleUse"
+  LN_single_use* = "X509v3 Single Use"
+  NID_single_use* = 1309
+  SN_group_ac* = "groupAC"
+  LN_group_ac* = "X509v3 Group Attribute Certificate"
+  NID_group_ac* = 1310
+  SN_allowed_attribute_assignments* = "allowedAttributeAssignments"
+  LN_allowed_attribute_assignments* = "X509v3 Allowed Attribute Assignments"
+  NID_allowed_attribute_assignments* = 1311
+  SN_attribute_mappings* = "attributeMappings"
+  LN_attribute_mappings* = "X509v3 Attribute Mappings"
+  NID_attribute_mappings* = 1312
+  SN_holder_name_constraints* = "holderNameConstraints"
+  LN_holder_name_constraints* = "X509v3 Holder Name Constraints"
+  NID_holder_name_constraints* = 1313
+  SN_authorization_validation* = "authorizationValidation"
+  LN_authorization_validation* = "X509v3 Authorization Validation"
+  NID_authorization_validation* = 1314
+  SN_prot_restrict* = "protRestrict"
+  LN_prot_restrict* = "X509v3 Protocol Restriction"
+  NID_prot_restrict* = 1315
+  SN_subject_alt_public_key_info* = "subjectAltPublicKeyInfo"
+  LN_subject_alt_public_key_info* = "X509v3 Subject Alternative Public Key Info"
+  NID_subject_alt_public_key_info* = 1316
+  SN_alt_signature_algorithm* = "altSignatureAlgorithm"
+  LN_alt_signature_algorithm* = "X509v3 Alternative Signature Algorithm"
+  NID_alt_signature_algorithm* = 1317
+  SN_alt_signature_value* = "altSignatureValue"
+  LN_alt_signature_value* = "X509v3 Alternative Signature Value"
+  NID_alt_signature_value* = 1318
+  SN_associated_information* = "associatedInformation"
+  LN_associated_information* = "X509v3 Associated Information"
+  NID_associated_information* = 1319
+  SN_anyExtendedKeyUsage* = "anyExtendedKeyUsage"
+  LN_anyExtendedKeyUsage* = "Any Extended Key Usage"
+  NID_anyExtendedKeyUsage* = 910
+  SN_netscape* = "Netscape"
+  LN_netscape* = "Netscape Communications Corp."
+  NID_netscape* = 57
+  SN_netscape_cert_extension* = "nsCertExt"
+  LN_netscape_cert_extension* = "Netscape Certificate Extension"
+  NID_netscape_cert_extension* = 58
+  SN_netscape_data_type* = "nsDataType"
+  LN_netscape_data_type* = "Netscape Data Type"
+  NID_netscape_data_type* = 59
+  SN_netscape_cert_type* = "nsCertType"
+  LN_netscape_cert_type* = "Netscape Cert Type"
+  NID_netscape_cert_type* = 71
+  SN_netscape_base_url* = "nsBaseUrl"
+  LN_netscape_base_url* = "Netscape Base Url"
+  NID_netscape_base_url* = 72
+  SN_netscape_revocation_url* = "nsRevocationUrl"
+  LN_netscape_revocation_url* = "Netscape Revocation Url"
+  NID_netscape_revocation_url* = 73
+  SN_netscape_ca_revocation_url* = "nsCaRevocationUrl"
+  LN_netscape_ca_revocation_url* = "Netscape CA Revocation Url"
+  NID_netscape_ca_revocation_url* = 74
+  SN_netscape_renewal_url* = "nsRenewalUrl"
+  LN_netscape_renewal_url* = "Netscape Renewal Url"
+  NID_netscape_renewal_url* = 75
+  SN_netscape_ca_policy_url* = "nsCaPolicyUrl"
+  LN_netscape_ca_policy_url* = "Netscape CA Policy Url"
+  NID_netscape_ca_policy_url* = 76
+  SN_netscape_ssl_server_name* = "nsSslServerName"
+  LN_netscape_ssl_server_name* = "Netscape SSL Server Name"
+  NID_netscape_ssl_server_name* = 77
+  SN_netscape_comment* = "nsComment"
+  LN_netscape_comment* = "Netscape Comment"
+  NID_netscape_comment* = 78
+  SN_netscape_cert_sequence* = "nsCertSequence"
+  LN_netscape_cert_sequence* = "Netscape Certificate Sequence"
+  NID_netscape_cert_sequence* = 79
+  SN_ns_sgc* = "nsSGC"
+  LN_ns_sgc* = "Netscape Server Gated Crypto"
+  NID_ns_sgc* = 139
+  SN_org* = "ORG"
+  LN_org* = "org"
+  NID_org* = 379
+  SN_dod* = "DOD"
+  LN_dod* = "dod"
+  NID_dod* = 380
+  SN_iana* = "IANA"
+  LN_iana* = "iana"
+  NID_iana* = 381
+  SN_Directory* = "directory"
+  LN_Directory* = "Directory"
+  NID_Directory* = 382
+  SN_Management* = "mgmt"
+  LN_Management* = "Management"
+  NID_Management* = 383
+  SN_Experimental* = "experimental"
+  LN_Experimental* = "Experimental"
+  NID_Experimental* = 384
+  SN_Private* = "private"
+  LN_Private* = "Private"
+  NID_Private* = 385
+  SN_Security* = "security"
+  LN_Security* = "Security"
+  NID_Security* = 386
+  SN_SNMPv2* = "snmpv2"
+  LN_SNMPv2* = "SNMPv2"
+  NID_SNMPv2* = 387
+  LN_Mail* = "Mail"
+  NID_Mail* = 388
+  SN_Enterprises* = "enterprises"
+  LN_Enterprises* = "Enterprises"
+  NID_Enterprises* = 389
+  SN_dcObject* = "dcobject"
+  LN_dcObject* = "dcObject"
+  NID_dcObject* = 390
+  SN_mime_mhs* = "mime-mhs"
+  LN_mime_mhs* = "MIME MHS"
+  NID_mime_mhs* = 504
+  SN_mime_mhs_headings* = "mime-mhs-headings"
+  LN_mime_mhs_headings* = "mime-mhs-headings"
+  NID_mime_mhs_headings* = 505
+  SN_mime_mhs_bodies* = "mime-mhs-bodies"
+  LN_mime_mhs_bodies* = "mime-mhs-bodies"
+  NID_mime_mhs_bodies* = 506
+  SN_id_hex_partial_message* = "id-hex-partial-message"
+  LN_id_hex_partial_message* = "id-hex-partial-message"
+  NID_id_hex_partial_message* = 507
+  SN_id_hex_multipart_message* = "id-hex-multipart-message"
+  LN_id_hex_multipart_message* = "id-hex-multipart-message"
+  NID_id_hex_multipart_message* = 508
+  SN_zlib_compression* = "ZLIB"
+  LN_zlib_compression* = "zlib compression"
+  NID_zlib_compression* = 125
+  SN_aes_128_ecb* = "AES-128-ECB"
+  LN_aes_128_ecb* = "aes-128-ecb"
+  NID_aes_128_ecb* = 418
+  SN_aes_128_cbc* = "AES-128-CBC"
+  LN_aes_128_cbc* = "aes-128-cbc"
+  NID_aes_128_cbc* = 419
+  SN_aes_128_ofb128* = "AES-128-OFB"
+  LN_aes_128_ofb128* = "aes-128-ofb"
+  NID_aes_128_ofb128* = 420
+  SN_aes_128_cfb128* = "AES-128-CFB"
+  LN_aes_128_cfb128* = "aes-128-cfb"
+  NID_aes_128_cfb128* = 421
+  SN_id_aes128_wrap* = "id-aes128-wrap"
+  NID_id_aes128_wrap* = 788
+  SN_aes_128_gcm* = "id-aes128-GCM"
+  LN_aes_128_gcm* = "aes-128-gcm"
+  NID_aes_128_gcm* = 895
+  SN_aes_128_ccm* = "id-aes128-CCM"
+  LN_aes_128_ccm* = "aes-128-ccm"
+  NID_aes_128_ccm* = 896
+  SN_id_aes128_wrap_pad* = "id-aes128-wrap-pad"
+  NID_id_aes128_wrap_pad* = 897
+  SN_aes_192_ecb* = "AES-192-ECB"
+  LN_aes_192_ecb* = "aes-192-ecb"
+  NID_aes_192_ecb* = 422
+  SN_aes_192_cbc* = "AES-192-CBC"
+  LN_aes_192_cbc* = "aes-192-cbc"
+  NID_aes_192_cbc* = 423
+  SN_aes_192_ofb128* = "AES-192-OFB"
+  LN_aes_192_ofb128* = "aes-192-ofb"
+  NID_aes_192_ofb128* = 424
+  SN_aes_192_cfb128* = "AES-192-CFB"
+  LN_aes_192_cfb128* = "aes-192-cfb"
+  NID_aes_192_cfb128* = 425
+  SN_id_aes192_wrap* = "id-aes192-wrap"
+  NID_id_aes192_wrap* = 789
+  SN_aes_192_gcm* = "id-aes192-GCM"
+  LN_aes_192_gcm* = "aes-192-gcm"
+  NID_aes_192_gcm* = 898
+  SN_aes_192_ccm* = "id-aes192-CCM"
+  LN_aes_192_ccm* = "aes-192-ccm"
+  NID_aes_192_ccm* = 899
+  SN_id_aes192_wrap_pad* = "id-aes192-wrap-pad"
+  NID_id_aes192_wrap_pad* = 900
+  SN_aes_256_ecb* = "AES-256-ECB"
+  LN_aes_256_ecb* = "aes-256-ecb"
+  NID_aes_256_ecb* = 426
+  SN_aes_256_cbc* = "AES-256-CBC"
+  LN_aes_256_cbc* = "aes-256-cbc"
+  NID_aes_256_cbc* = 427
+  SN_aes_256_ofb128* = "AES-256-OFB"
+  LN_aes_256_ofb128* = "aes-256-ofb"
+  NID_aes_256_ofb128* = 428
+  SN_aes_256_cfb128* = "AES-256-CFB"
+  LN_aes_256_cfb128* = "aes-256-cfb"
+  NID_aes_256_cfb128* = 429
+  SN_id_aes256_wrap* = "id-aes256-wrap"
+  NID_id_aes256_wrap* = 790
+  SN_aes_256_gcm* = "id-aes256-GCM"
+  LN_aes_256_gcm* = "aes-256-gcm"
+  NID_aes_256_gcm* = 901
+  SN_aes_256_ccm* = "id-aes256-CCM"
+  LN_aes_256_ccm* = "aes-256-ccm"
+  NID_aes_256_ccm* = 902
+  SN_id_aes256_wrap_pad* = "id-aes256-wrap-pad"
+  NID_id_aes256_wrap_pad* = 903
+  SN_aes_128_xts* = "AES-128-XTS"
+  LN_aes_128_xts* = "aes-128-xts"
+  NID_aes_128_xts* = 913
+  SN_aes_256_xts* = "AES-256-XTS"
+  LN_aes_256_xts* = "aes-256-xts"
+  NID_aes_256_xts* = 914
+  SN_aes_128_cfb1* = "AES-128-CFB1"
+  LN_aes_128_cfb1* = "aes-128-cfb1"
+  NID_aes_128_cfb1* = 650
+  SN_aes_192_cfb1* = "AES-192-CFB1"
+  LN_aes_192_cfb1* = "aes-192-cfb1"
+  NID_aes_192_cfb1* = 651
+  SN_aes_256_cfb1* = "AES-256-CFB1"
+  LN_aes_256_cfb1* = "aes-256-cfb1"
+  NID_aes_256_cfb1* = 652
+  SN_aes_128_cfb8* = "AES-128-CFB8"
+  LN_aes_128_cfb8* = "aes-128-cfb8"
+  NID_aes_128_cfb8* = 653
+  SN_aes_192_cfb8* = "AES-192-CFB8"
+  LN_aes_192_cfb8* = "aes-192-cfb8"
+  NID_aes_192_cfb8* = 654
+  SN_aes_256_cfb8* = "AES-256-CFB8"
+  LN_aes_256_cfb8* = "aes-256-cfb8"
+  NID_aes_256_cfb8* = 655
+  SN_aes_128_ctr* = "AES-128-CTR"
+  LN_aes_128_ctr* = "aes-128-ctr"
+  NID_aes_128_ctr* = 904
+  SN_aes_192_ctr* = "AES-192-CTR"
+  LN_aes_192_ctr* = "aes-192-ctr"
+  NID_aes_192_ctr* = 905
+  SN_aes_256_ctr* = "AES-256-CTR"
+  LN_aes_256_ctr* = "aes-256-ctr"
+  NID_aes_256_ctr* = 906
+  SN_aes_128_ocb* = "AES-128-OCB"
+  LN_aes_128_ocb* = "aes-128-ocb"
+  NID_aes_128_ocb* = 958
+  SN_aes_192_ocb* = "AES-192-OCB"
+  LN_aes_192_ocb* = "aes-192-ocb"
+  NID_aes_192_ocb* = 959
+  SN_aes_256_ocb* = "AES-256-OCB"
+  LN_aes_256_ocb* = "aes-256-ocb"
+  NID_aes_256_ocb* = 960
+  SN_des_cfb1* = "DES-CFB1"
+  LN_des_cfb1* = "des-cfb1"
+  NID_des_cfb1* = 656
+  SN_des_cfb8* = "DES-CFB8"
+  LN_des_cfb8* = "des-cfb8"
+  NID_des_cfb8* = 657
+  SN_des_ede3_cfb1* = "DES-EDE3-CFB1"
+  LN_des_ede3_cfb1* = "des-ede3-cfb1"
+  NID_des_ede3_cfb1* = 658
+  SN_des_ede3_cfb8* = "DES-EDE3-CFB8"
+  LN_des_ede3_cfb8* = "des-ede3-cfb8"
+  NID_des_ede3_cfb8* = 659
+  SN_sha256* = "SHA256"
+  LN_sha256* = "sha256"
+  NID_sha256* = 672
+  SN_sha384* = "SHA384"
+  LN_sha384* = "sha384"
+  NID_sha384* = 673
+  SN_sha512* = "SHA512"
+  LN_sha512* = "sha512"
+  NID_sha512* = 674
+  SN_sha224* = "SHA224"
+  LN_sha224* = "sha224"
+  NID_sha224* = 675
+  SN_sha512_224* = "SHA512-224"
+  LN_sha512_224* = "sha512-224"
+  NID_sha512_224* = 1094
+  SN_sha512_256* = "SHA512-256"
+  LN_sha512_256* = "sha512-256"
+  NID_sha512_256* = 1095
+  SN_sha3_224* = "SHA3-224"
+  LN_sha3_224* = "sha3-224"
+  NID_sha3_224* = 1096
+  SN_sha3_256* = "SHA3-256"
+  LN_sha3_256* = "sha3-256"
+  NID_sha3_256* = 1097
+  SN_sha3_384* = "SHA3-384"
+  LN_sha3_384* = "sha3-384"
+  NID_sha3_384* = 1098
+  SN_sha3_512* = "SHA3-512"
+  LN_sha3_512* = "sha3-512"
+  NID_sha3_512* = 1099
+  SN_shake128* = "SHAKE128"
+  LN_shake128* = "shake128"
+  NID_shake128* = 1100
+  SN_shake256* = "SHAKE256"
+  LN_shake256* = "shake256"
+  NID_shake256* = 1101
+  SN_hmac_sha3_224* = "id-hmacWithSHA3-224"
+  LN_hmac_sha3_224* = "hmac-sha3-224"
+  NID_hmac_sha3_224* = 1102
+  SN_hmac_sha3_256* = "id-hmacWithSHA3-256"
+  LN_hmac_sha3_256* = "hmac-sha3-256"
+  NID_hmac_sha3_256* = 1103
+  SN_hmac_sha3_384* = "id-hmacWithSHA3-384"
+  LN_hmac_sha3_384* = "hmac-sha3-384"
+  NID_hmac_sha3_384* = 1104
+  SN_hmac_sha3_512* = "id-hmacWithSHA3-512"
+  LN_hmac_sha3_512* = "hmac-sha3-512"
+  NID_hmac_sha3_512* = 1105
+  SN_kmac128* = "KMAC128"
+  LN_kmac128* = "kmac128"
+  NID_kmac128* = 1196
+  SN_kmac256* = "KMAC256"
+  LN_kmac256* = "kmac256"
+  NID_kmac256* = 1197
+  SN_dsa_with_SHA224* = "dsa_with_SHA224"
+  NID_dsa_with_SHA224* = 802
+  SN_dsa_with_SHA256* = "dsa_with_SHA256"
+  NID_dsa_with_SHA256* = 803
+  SN_dsa_with_SHA384* = "id-dsa-with-sha384"
+  LN_dsa_with_SHA384* = "dsa_with_SHA384"
+  NID_dsa_with_SHA384* = 1106
+  SN_dsa_with_SHA512* = "id-dsa-with-sha512"
+  LN_dsa_with_SHA512* = "dsa_with_SHA512"
+  NID_dsa_with_SHA512* = 1107
+  SN_dsa_with_SHA3_224* = "id-dsa-with-sha3-224"
+  LN_dsa_with_SHA3_224* = "dsa_with_SHA3-224"
+  NID_dsa_with_SHA3_224* = 1108
+  SN_dsa_with_SHA3_256* = "id-dsa-with-sha3-256"
+  LN_dsa_with_SHA3_256* = "dsa_with_SHA3-256"
+  NID_dsa_with_SHA3_256* = 1109
+  SN_dsa_with_SHA3_384* = "id-dsa-with-sha3-384"
+  LN_dsa_with_SHA3_384* = "dsa_with_SHA3-384"
+  NID_dsa_with_SHA3_384* = 1110
+  SN_dsa_with_SHA3_512* = "id-dsa-with-sha3-512"
+  LN_dsa_with_SHA3_512* = "dsa_with_SHA3-512"
+  NID_dsa_with_SHA3_512* = 1111
+  SN_ecdsa_with_SHA3_224* = "id-ecdsa-with-sha3-224"
+  LN_ecdsa_with_SHA3_224* = "ecdsa_with_SHA3-224"
+  NID_ecdsa_with_SHA3_224* = 1112
+  SN_ecdsa_with_SHA3_256* = "id-ecdsa-with-sha3-256"
+  LN_ecdsa_with_SHA3_256* = "ecdsa_with_SHA3-256"
+  NID_ecdsa_with_SHA3_256* = 1113
+  SN_ecdsa_with_SHA3_384* = "id-ecdsa-with-sha3-384"
+  LN_ecdsa_with_SHA3_384* = "ecdsa_with_SHA3-384"
+  NID_ecdsa_with_SHA3_384* = 1114
+  SN_ecdsa_with_SHA3_512* = "id-ecdsa-with-sha3-512"
+  LN_ecdsa_with_SHA3_512* = "ecdsa_with_SHA3-512"
+  NID_ecdsa_with_SHA3_512* = 1115
+  SN_RSA_SHA3_224* = "id-rsassa-pkcs1-v1_5-with-sha3-224"
+  LN_RSA_SHA3_224* = "RSA-SHA3-224"
+  NID_RSA_SHA3_224* = 1116
+  SN_RSA_SHA3_256* = "id-rsassa-pkcs1-v1_5-with-sha3-256"
+  LN_RSA_SHA3_256* = "RSA-SHA3-256"
+  NID_RSA_SHA3_256* = 1117
+  SN_RSA_SHA3_384* = "id-rsassa-pkcs1-v1_5-with-sha3-384"
+  LN_RSA_SHA3_384* = "RSA-SHA3-384"
+  NID_RSA_SHA3_384* = 1118
+  SN_RSA_SHA3_512* = "id-rsassa-pkcs1-v1_5-with-sha3-512"
+  LN_RSA_SHA3_512* = "RSA-SHA3-512"
+  NID_RSA_SHA3_512* = 1119
+  SN_hold_instruction_code* = "holdInstructionCode"
+  LN_hold_instruction_code* = "Hold Instruction Code"
+  NID_hold_instruction_code* = 430
+  SN_hold_instruction_none* = "holdInstructionNone"
+  LN_hold_instruction_none* = "Hold Instruction None"
+  NID_hold_instruction_none* = 431
+  SN_hold_instruction_call_issuer* = "holdInstructionCallIssuer"
+  LN_hold_instruction_call_issuer* = "Hold Instruction Call Issuer"
+  NID_hold_instruction_call_issuer* = 432
+  SN_hold_instruction_reject* = "holdInstructionReject"
+  LN_hold_instruction_reject* = "Hold Instruction Reject"
+  NID_hold_instruction_reject* = 433
+  SN_itu_t_identified_organization* = "itu-t-identified-organization"
+  NID_itu_t_identified_organization* = 1264
+  SN_etsi* = "etsi"
+  NID_etsi* = 1265
+  SN_electronic_signature_standard* = "electronic-signature-standard"
+  NID_electronic_signature_standard* = 1266
+  SN_ess_attributes* = "ess-attributes"
+  NID_ess_attributes* = 1267
+  SN_id_aa_ets_mimeType* = "id-aa-ets-mimeType"
+  NID_id_aa_ets_mimeType* = 1268
+  SN_id_aa_ets_longTermValidation* = "id-aa-ets-longTermValidation"
+  NID_id_aa_ets_longTermValidation* = 1269
+  SN_id_aa_ets_SignaturePolicyDocument* = "id-aa-ets-SignaturePolicyDocument"
+  NID_id_aa_ets_SignaturePolicyDocument* = 1270
+  SN_id_aa_ets_archiveTimestampV3* = "id-aa-ets-archiveTimestampV3"
+  NID_id_aa_ets_archiveTimestampV3* = 1271
+  SN_id_aa_ATSHashIndex* = "id-aa-ATSHashIndex"
+  NID_id_aa_ATSHashIndex* = 1272
+  SN_cades* = "cades"
+  NID_cades* = 1273
+  SN_cades_attributes* = "cades-attributes"
+  NID_cades_attributes* = 1274
+  SN_id_aa_ets_signerAttrV2* = "id-aa-ets-signerAttrV2"
+  NID_id_aa_ets_signerAttrV2* = 1275
+  SN_id_aa_ets_sigPolicyStore* = "id-aa-ets-sigPolicyStore"
+  NID_id_aa_ets_sigPolicyStore* = 1276
+  SN_id_aa_ATSHashIndex_v2* = "id-aa-ATSHashIndex-v2"
+  NID_id_aa_ATSHashIndex_v2* = 1277
+  SN_id_aa_ATSHashIndex_v3* = "id-aa-ATSHashIndex-v3"
+  NID_id_aa_ATSHashIndex_v3* = 1278
+  SN_signedAssertion* = "signedAssertion"
+  NID_signedAssertion* = 1279
+  SN_data* = "data"
+  NID_data* = 434
+  SN_pss* = "pss"
+  NID_pss* = 435
+  SN_ucl* = "ucl"
+  NID_ucl* = 436
+  SN_pilot* = "pilot"
+  NID_pilot* = 437
+  LN_pilotAttributeType* = "pilotAttributeType"
+  NID_pilotAttributeType* = 438
+  LN_pilotAttributeSyntax* = "pilotAttributeSyntax"
+  NID_pilotAttributeSyntax* = 439
+  LN_pilotObjectClass* = "pilotObjectClass"
+  NID_pilotObjectClass* = 440
+  LN_pilotGroups* = "pilotGroups"
+  NID_pilotGroups* = 441
+  LN_iA5StringSyntax* = "iA5StringSyntax"
+  NID_iA5StringSyntax* = 442
+  LN_caseIgnoreIA5StringSyntax* = "caseIgnoreIA5StringSyntax"
+  NID_caseIgnoreIA5StringSyntax* = 443
+  LN_pilotObject* = "pilotObject"
+  NID_pilotObject* = 444
+  LN_pilotPerson* = "pilotPerson"
+  NID_pilotPerson* = 445
+  SN_account* = "account"
+  NID_account* = 446
+  SN_document* = "document"
+  NID_document* = 447
+  SN_room* = "room"
+  NID_room* = 448
+  LN_documentSeries* = "documentSeries"
+  NID_documentSeries* = 449
+  SN_Domain* = "domain"
+  LN_Domain* = "Domain"
+  NID_Domain* = 392
+  LN_rFC822localPart* = "rFC822localPart"
+  NID_rFC822localPart* = 450
+  LN_dNSDomain* = "dNSDomain"
+  NID_dNSDomain* = 451
+  LN_domainRelatedObject* = "domainRelatedObject"
+  NID_domainRelatedObject* = 452
+  LN_friendlyCountry* = "friendlyCountry"
+  NID_friendlyCountry* = 453
+  LN_simpleSecurityObject* = "simpleSecurityObject"
+  NID_simpleSecurityObject* = 454
+  LN_pilotOrganization* = "pilotOrganization"
+  NID_pilotOrganization* = 455
+  LN_pilotDSA* = "pilotDSA"
+  NID_pilotDSA* = 456
+  LN_qualityLabelledData* = "qualityLabelledData"
+  NID_qualityLabelledData* = 457
+  SN_userId* = "UID"
+  LN_userId* = "userId"
+  NID_userId* = 458
+  LN_textEncodedORAddress* = "textEncodedORAddress"
+  NID_textEncodedORAddress* = 459
+  SN_rfc822Mailbox* = "mail"
+  LN_rfc822Mailbox* = "rfc822Mailbox"
+  NID_rfc822Mailbox* = 460
+  SN_info* = "info"
+  NID_info* = 461
+  LN_favouriteDrink* = "favouriteDrink"
+  NID_favouriteDrink* = 462
+  LN_roomNumber* = "roomNumber"
+  NID_roomNumber* = 463
+  SN_photo* = "photo"
+  NID_photo* = 464
+  LN_userClass* = "userClass"
+  NID_userClass* = 465
+  SN_host* = "host"
+  NID_host* = 466
+  SN_manager* = "manager"
+  NID_manager* = 467
+  LN_documentIdentifier* = "documentIdentifier"
+  NID_documentIdentifier* = 468
+  LN_documentTitle* = "documentTitle"
+  NID_documentTitle* = 469
+  LN_documentVersion* = "documentVersion"
+  NID_documentVersion* = 470
+  LN_documentAuthor* = "documentAuthor"
+  NID_documentAuthor* = 471
+  LN_documentLocation* = "documentLocation"
+  NID_documentLocation* = 472
+  LN_homeTelephoneNumber* = "homeTelephoneNumber"
+  NID_homeTelephoneNumber* = 473
+  SN_secretary* = "secretary"
+  NID_secretary* = 474
+  LN_otherMailbox* = "otherMailbox"
+  NID_otherMailbox* = 475
+  LN_lastModifiedTime* = "lastModifiedTime"
+  NID_lastModifiedTime* = 476
+  LN_lastModifiedBy* = "lastModifiedBy"
+  NID_lastModifiedBy* = 477
+  SN_domainComponent* = "DC"
+  LN_domainComponent* = "domainComponent"
+  NID_domainComponent* = 391
+  LN_aRecord* = "aRecord"
+  NID_aRecord* = 478
+  LN_pilotAttributeType27* = "pilotAttributeType27"
+  NID_pilotAttributeType27* = 479
+  LN_mXRecord* = "mXRecord"
+  NID_mXRecord* = 480
+  LN_nSRecord* = "nSRecord"
+  NID_nSRecord* = 481
+  LN_sOARecord* = "sOARecord"
+  NID_sOARecord* = 482
+  LN_cNAMERecord* = "cNAMERecord"
+  NID_cNAMERecord* = 483
+  LN_associatedDomain* = "associatedDomain"
+  NID_associatedDomain* = 484
+  LN_associatedName* = "associatedName"
+  NID_associatedName* = 485
+  LN_homePostalAddress* = "homePostalAddress"
+  NID_homePostalAddress* = 486
+  LN_personalTitle* = "personalTitle"
+  NID_personalTitle* = 487
+  LN_mobileTelephoneNumber* = "mobileTelephoneNumber"
+  NID_mobileTelephoneNumber* = 488
+  LN_pagerTelephoneNumber* = "pagerTelephoneNumber"
+  NID_pagerTelephoneNumber* = 489
+  LN_friendlyCountryName* = "friendlyCountryName"
+  NID_friendlyCountryName* = 490
+  SN_uniqueIdentifier* = "uid"
+  LN_uniqueIdentifier* = "uniqueIdentifier"
+  NID_uniqueIdentifier* = 102
+  LN_organizationalStatus* = "organizationalStatus"
+  NID_organizationalStatus* = 491
+  LN_janetMailbox* = "janetMailbox"
+  NID_janetMailbox* = 492
+  LN_mailPreferenceOption* = "mailPreferenceOption"
+  NID_mailPreferenceOption* = 493
+  LN_buildingName* = "buildingName"
+  NID_buildingName* = 494
+  LN_dSAQuality* = "dSAQuality"
+  NID_dSAQuality* = 495
+  LN_singleLevelQuality* = "singleLevelQuality"
+  NID_singleLevelQuality* = 496
+  LN_subtreeMinimumQuality* = "subtreeMinimumQuality"
+  NID_subtreeMinimumQuality* = 497
+  LN_subtreeMaximumQuality* = "subtreeMaximumQuality"
+  NID_subtreeMaximumQuality* = 498
+  LN_personalSignature* = "personalSignature"
+  NID_personalSignature* = 499
+  LN_dITRedirect* = "dITRedirect"
+  NID_dITRedirect* = 500
+  SN_audio* = "audio"
+  NID_audio* = 501
+  LN_documentPublisher* = "documentPublisher"
+  NID_documentPublisher* = 502
+  SN_id_set* = "id-set"
+  LN_id_set* = "Secure Electronic Transactions"
+  NID_id_set* = 512
+  SN_set_ctype* = "set-ctype"
+  LN_set_ctype* = "content types"
+  NID_set_ctype* = 513
+  SN_set_msgExt* = "set-msgExt"
+  LN_set_msgExt* = "message extensions"
+  NID_set_msgExt* = 514
+  SN_set_attr* = "set-attr"
+  NID_set_attr* = 515
+  SN_set_policy* = "set-policy"
+  NID_set_policy* = 516
+  SN_set_certExt* = "set-certExt"
+  LN_set_certExt* = "certificate extensions"
+  NID_set_certExt* = 517
+  SN_set_brand* = "set-brand"
+  NID_set_brand* = 518
+  SN_setct_PANData* = "setct-PANData"
+  NID_setct_PANData* = 519
+  SN_setct_PANToken* = "setct-PANToken"
+  NID_setct_PANToken* = 520
+  SN_setct_PANOnly* = "setct-PANOnly"
+  NID_setct_PANOnly* = 521
+  SN_setct_OIData* = "setct-OIData"
+  NID_setct_OIData* = 522
+  SN_setct_PI* = "setct-PI"
+  NID_setct_PI* = 523
+  SN_setct_PIData* = "setct-PIData"
+  NID_setct_PIData* = 524
+  SN_setct_PIDataUnsigned* = "setct-PIDataUnsigned"
+  NID_setct_PIDataUnsigned* = 525
+  SN_setct_HODInput* = "setct-HODInput"
+  NID_setct_HODInput* = 526
+  SN_setct_AuthResBaggage* = "setct-AuthResBaggage"
+  NID_setct_AuthResBaggage* = 527
+  SN_setct_AuthRevReqBaggage* = "setct-AuthRevReqBaggage"
+  NID_setct_AuthRevReqBaggage* = 528
+  SN_setct_AuthRevResBaggage* = "setct-AuthRevResBaggage"
+  NID_setct_AuthRevResBaggage* = 529
+  SN_setct_CapTokenSeq* = "setct-CapTokenSeq"
+  NID_setct_CapTokenSeq* = 530
+  SN_setct_PInitResData* = "setct-PInitResData"
+  NID_setct_PInitResData* = 531
+  SN_setct_PI_TBS* = "setct-PI-TBS"
+  NID_setct_PI_TBS* = 532
+  SN_setct_PResData* = "setct-PResData"
+  NID_setct_PResData* = 533
+  SN_setct_AuthReqTBS* = "setct-AuthReqTBS"
+  NID_setct_AuthReqTBS* = 534
+  SN_setct_AuthResTBS* = "setct-AuthResTBS"
+  NID_setct_AuthResTBS* = 535
+  SN_setct_AuthResTBSX* = "setct-AuthResTBSX"
+  NID_setct_AuthResTBSX* = 536
+  SN_setct_AuthTokenTBS* = "setct-AuthTokenTBS"
+  NID_setct_AuthTokenTBS* = 537
+  SN_setct_CapTokenData* = "setct-CapTokenData"
+  NID_setct_CapTokenData* = 538
+  SN_setct_CapTokenTBS* = "setct-CapTokenTBS"
+  NID_setct_CapTokenTBS* = 539
+  SN_setct_AcqCardCodeMsg* = "setct-AcqCardCodeMsg"
+  NID_setct_AcqCardCodeMsg* = 540
+  SN_setct_AuthRevReqTBS* = "setct-AuthRevReqTBS"
+  NID_setct_AuthRevReqTBS* = 541
+  SN_setct_AuthRevResData* = "setct-AuthRevResData"
+  NID_setct_AuthRevResData* = 542
+  SN_setct_AuthRevResTBS* = "setct-AuthRevResTBS"
+  NID_setct_AuthRevResTBS* = 543
+  SN_setct_CapReqTBS* = "setct-CapReqTBS"
+  NID_setct_CapReqTBS* = 544
+  SN_setct_CapReqTBSX* = "setct-CapReqTBSX"
+  NID_setct_CapReqTBSX* = 545
+  SN_setct_CapResData* = "setct-CapResData"
+  NID_setct_CapResData* = 546
+  SN_setct_CapRevReqTBS* = "setct-CapRevReqTBS"
+  NID_setct_CapRevReqTBS* = 547
+  SN_setct_CapRevReqTBSX* = "setct-CapRevReqTBSX"
+  NID_setct_CapRevReqTBSX* = 548
+  SN_setct_CapRevResData* = "setct-CapRevResData"
+  NID_setct_CapRevResData* = 549
+  SN_setct_CredReqTBS* = "setct-CredReqTBS"
+  NID_setct_CredReqTBS* = 550
+  SN_setct_CredReqTBSX* = "setct-CredReqTBSX"
+  NID_setct_CredReqTBSX* = 551
+  SN_setct_CredResData* = "setct-CredResData"
+  NID_setct_CredResData* = 552
+  SN_setct_CredRevReqTBS* = "setct-CredRevReqTBS"
+  NID_setct_CredRevReqTBS* = 553
+  SN_setct_CredRevReqTBSX* = "setct-CredRevReqTBSX"
+  NID_setct_CredRevReqTBSX* = 554
+  SN_setct_CredRevResData* = "setct-CredRevResData"
+  NID_setct_CredRevResData* = 555
+  SN_setct_PCertReqData* = "setct-PCertReqData"
+  NID_setct_PCertReqData* = 556
+  SN_setct_PCertResTBS* = "setct-PCertResTBS"
+  NID_setct_PCertResTBS* = 557
+  SN_setct_BatchAdminReqData* = "setct-BatchAdminReqData"
+  NID_setct_BatchAdminReqData* = 558
+  SN_setct_BatchAdminResData* = "setct-BatchAdminResData"
+  NID_setct_BatchAdminResData* = 559
+  SN_setct_CardCInitResTBS* = "setct-CardCInitResTBS"
+  NID_setct_CardCInitResTBS* = 560
+  SN_setct_MeAqCInitResTBS* = "setct-MeAqCInitResTBS"
+  NID_setct_MeAqCInitResTBS* = 561
+  SN_setct_RegFormResTBS* = "setct-RegFormResTBS"
+  NID_setct_RegFormResTBS* = 562
+  SN_setct_CertReqData* = "setct-CertReqData"
+  NID_setct_CertReqData* = 563
+  SN_setct_CertReqTBS* = "setct-CertReqTBS"
+  NID_setct_CertReqTBS* = 564
+  SN_setct_CertResData* = "setct-CertResData"
+  NID_setct_CertResData* = 565
+  SN_setct_CertInqReqTBS* = "setct-CertInqReqTBS"
+  NID_setct_CertInqReqTBS* = 566
+  SN_setct_ErrorTBS* = "setct-ErrorTBS"
+  NID_setct_ErrorTBS* = 567
+  SN_setct_PIDualSignedTBE* = "setct-PIDualSignedTBE"
+  NID_setct_PIDualSignedTBE* = 568
+  SN_setct_PIUnsignedTBE* = "setct-PIUnsignedTBE"
+  NID_setct_PIUnsignedTBE* = 569
+  SN_setct_AuthReqTBE* = "setct-AuthReqTBE"
+  NID_setct_AuthReqTBE* = 570
+  SN_setct_AuthResTBE* = "setct-AuthResTBE"
+  NID_setct_AuthResTBE* = 571
+  SN_setct_AuthResTBEX* = "setct-AuthResTBEX"
+  NID_setct_AuthResTBEX* = 572
+  SN_setct_AuthTokenTBE* = "setct-AuthTokenTBE"
+  NID_setct_AuthTokenTBE* = 573
+  SN_setct_CapTokenTBE* = "setct-CapTokenTBE"
+  NID_setct_CapTokenTBE* = 574
+  SN_setct_CapTokenTBEX* = "setct-CapTokenTBEX"
+  NID_setct_CapTokenTBEX* = 575
+  SN_setct_AcqCardCodeMsgTBE* = "setct-AcqCardCodeMsgTBE"
+  NID_setct_AcqCardCodeMsgTBE* = 576
+  SN_setct_AuthRevReqTBE* = "setct-AuthRevReqTBE"
+  NID_setct_AuthRevReqTBE* = 577
+  SN_setct_AuthRevResTBE* = "setct-AuthRevResTBE"
+  NID_setct_AuthRevResTBE* = 578
+  SN_setct_AuthRevResTBEB* = "setct-AuthRevResTBEB"
+  NID_setct_AuthRevResTBEB* = 579
+  SN_setct_CapReqTBE* = "setct-CapReqTBE"
+  NID_setct_CapReqTBE* = 580
+  SN_setct_CapReqTBEX* = "setct-CapReqTBEX"
+  NID_setct_CapReqTBEX* = 581
+  SN_setct_CapResTBE* = "setct-CapResTBE"
+  NID_setct_CapResTBE* = 582
+  SN_setct_CapRevReqTBE* = "setct-CapRevReqTBE"
+  NID_setct_CapRevReqTBE* = 583
+  SN_setct_CapRevReqTBEX* = "setct-CapRevReqTBEX"
+  NID_setct_CapRevReqTBEX* = 584
+  SN_setct_CapRevResTBE* = "setct-CapRevResTBE"
+  NID_setct_CapRevResTBE* = 585
+  SN_setct_CredReqTBE* = "setct-CredReqTBE"
+  NID_setct_CredReqTBE* = 586
+  SN_setct_CredReqTBEX* = "setct-CredReqTBEX"
+  NID_setct_CredReqTBEX* = 587
+  SN_setct_CredResTBE* = "setct-CredResTBE"
+  NID_setct_CredResTBE* = 588
+  SN_setct_CredRevReqTBE* = "setct-CredRevReqTBE"
+  NID_setct_CredRevReqTBE* = 589
+  SN_setct_CredRevReqTBEX* = "setct-CredRevReqTBEX"
+  NID_setct_CredRevReqTBEX* = 590
+  SN_setct_CredRevResTBE* = "setct-CredRevResTBE"
+  NID_setct_CredRevResTBE* = 591
+  SN_setct_BatchAdminReqTBE* = "setct-BatchAdminReqTBE"
+  NID_setct_BatchAdminReqTBE* = 592
+  SN_setct_BatchAdminResTBE* = "setct-BatchAdminResTBE"
+  NID_setct_BatchAdminResTBE* = 593
+  SN_setct_RegFormReqTBE* = "setct-RegFormReqTBE"
+  NID_setct_RegFormReqTBE* = 594
+  SN_setct_CertReqTBE* = "setct-CertReqTBE"
+  NID_setct_CertReqTBE* = 595
+  SN_setct_CertReqTBEX* = "setct-CertReqTBEX"
+  NID_setct_CertReqTBEX* = 596
+  SN_setct_CertResTBE* = "setct-CertResTBE"
+  NID_setct_CertResTBE* = 597
+  SN_setct_CRLNotificationTBS* = "setct-CRLNotificationTBS"
+  NID_setct_CRLNotificationTBS* = 598
+  SN_setct_CRLNotificationResTBS* = "setct-CRLNotificationResTBS"
+  NID_setct_CRLNotificationResTBS* = 599
+  SN_setct_BCIDistributionTBS* = "setct-BCIDistributionTBS"
+  NID_setct_BCIDistributionTBS* = 600
+  SN_setext_genCrypt* = "setext-genCrypt"
+  LN_setext_genCrypt* = "generic cryptogram"
+  NID_setext_genCrypt* = 601
+  SN_setext_miAuth* = "setext-miAuth"
+  LN_setext_miAuth* = "merchant initiated auth"
+  NID_setext_miAuth* = 602
+  SN_setext_pinSecure* = "setext-pinSecure"
+  NID_setext_pinSecure* = 603
+  SN_setext_pinAny* = "setext-pinAny"
+  NID_setext_pinAny* = 604
+  SN_setext_track2* = "setext-track2"
+  NID_setext_track2* = 605
+  SN_setext_cv* = "setext-cv"
+  LN_setext_cv* = "additional verification"
+  NID_setext_cv* = 606
+  SN_set_policy_root* = "set-policy-root"
+  NID_set_policy_root* = 607
+  SN_setCext_hashedRoot* = "setCext-hashedRoot"
+  NID_setCext_hashedRoot* = 608
+  SN_setCext_certType* = "setCext-certType"
+  NID_setCext_certType* = 609
+  SN_setCext_merchData* = "setCext-merchData"
+  NID_setCext_merchData* = 610
+  SN_setCext_cCertRequired* = "setCext-cCertRequired"
+  NID_setCext_cCertRequired* = 611
+  SN_setCext_tunneling* = "setCext-tunneling"
+  NID_setCext_tunneling* = 612
+  SN_setCext_setExt* = "setCext-setExt"
+  NID_setCext_setExt* = 613
+  SN_setCext_setQualf* = "setCext-setQualf"
+  NID_setCext_setQualf* = 614
+  SN_setCext_PGWYcapabilities* = "setCext-PGWYcapabilities"
+  NID_setCext_PGWYcapabilities* = 615
+  SN_setCext_TokenIdentifier* = "setCext-TokenIdentifier"
+  NID_setCext_TokenIdentifier* = 616
+  SN_setCext_Track2Data* = "setCext-Track2Data"
+  NID_setCext_Track2Data* = 617
+  SN_setCext_TokenType* = "setCext-TokenType"
+  NID_setCext_TokenType* = 618
+  SN_setCext_IssuerCapabilities* = "setCext-IssuerCapabilities"
+  NID_setCext_IssuerCapabilities* = 619
+  SN_setAttr_Cert* = "setAttr-Cert"
+  NID_setAttr_Cert* = 620
+  SN_setAttr_PGWYcap* = "setAttr-PGWYcap"
+  LN_setAttr_PGWYcap* = "payment gateway capabilities"
+  NID_setAttr_PGWYcap* = 621
+  SN_setAttr_TokenType* = "setAttr-TokenType"
+  NID_setAttr_TokenType* = 622
+  SN_setAttr_IssCap* = "setAttr-IssCap"
+  LN_setAttr_IssCap* = "issuer capabilities"
+  NID_setAttr_IssCap* = 623
+  SN_set_rootKeyThumb* = "set-rootKeyThumb"
+  NID_set_rootKeyThumb* = 624
+  SN_set_addPolicy* = "set-addPolicy"
+  NID_set_addPolicy* = 625
+  SN_setAttr_Token_EMV* = "setAttr-Token-EMV"
+  NID_setAttr_Token_EMV* = 626
+  SN_setAttr_Token_B0Prime* = "setAttr-Token-B0Prime"
+  NID_setAttr_Token_B0Prime* = 627
+  SN_setAttr_IssCap_CVM* = "setAttr-IssCap-CVM"
+  NID_setAttr_IssCap_CVM* = 628
+  SN_setAttr_IssCap_T2* = "setAttr-IssCap-T2"
+  NID_setAttr_IssCap_T2* = 629
+  SN_setAttr_IssCap_Sig* = "setAttr-IssCap-Sig"
+  NID_setAttr_IssCap_Sig* = 630
+  SN_setAttr_GenCryptgrm* = "setAttr-GenCryptgrm"
+  LN_setAttr_GenCryptgrm* = "generate cryptogram"
+  NID_setAttr_GenCryptgrm* = 631
+  SN_setAttr_T2Enc* = "setAttr-T2Enc"
+  LN_setAttr_T2Enc* = "encrypted track 2"
+  NID_setAttr_T2Enc* = 632
+  SN_setAttr_T2cleartxt* = "setAttr-T2cleartxt"
+  LN_setAttr_T2cleartxt* = "cleartext track 2"
+  NID_setAttr_T2cleartxt* = 633
+  SN_setAttr_TokICCsig* = "setAttr-TokICCsig"
+  LN_setAttr_TokICCsig* = "ICC or token signature"
+  NID_setAttr_TokICCsig* = 634
+  SN_setAttr_SecDevSig* = "setAttr-SecDevSig"
+  LN_setAttr_SecDevSig* = "secure device signature"
+  NID_setAttr_SecDevSig* = 635
+  SN_set_brand_IATA_ATA* = "set-brand-IATA-ATA"
+  NID_set_brand_IATA_ATA* = 636
+  SN_set_brand_Diners* = "set-brand-Diners"
+  NID_set_brand_Diners* = 637
+  SN_set_brand_AmericanExpress* = "set-brand-AmericanExpress"
+  NID_set_brand_AmericanExpress* = 638
+  SN_set_brand_JCB* = "set-brand-JCB"
+  NID_set_brand_JCB* = 639
+  SN_set_brand_Visa* = "set-brand-Visa"
+  NID_set_brand_Visa* = 640
+  SN_set_brand_MasterCard* = "set-brand-MasterCard"
+  NID_set_brand_MasterCard* = 641
+  SN_set_brand_Novus* = "set-brand-Novus"
+  NID_set_brand_Novus* = 642
+  SN_des_cdmf* = "DES-CDMF"
+  LN_des_cdmf* = "des-cdmf"
+  NID_des_cdmf* = 643
+  SN_rsaOAEPEncryptionSET* = "rsaOAEPEncryptionSET"
+  NID_rsaOAEPEncryptionSET* = 644
+  SN_ipsec3* = "Oakley-EC2N-3"
+  LN_ipsec3* = "ipsec3"
+  NID_ipsec3* = 749
+  SN_ipsec4* = "Oakley-EC2N-4"
+  LN_ipsec4* = "ipsec4"
+  NID_ipsec4* = 750
+  SN_whirlpool* = "whirlpool"
+  NID_whirlpool* = 804
+  SN_cryptopro* = "cryptopro"
+  NID_cryptopro* = 805
+  SN_cryptocom* = "cryptocom"
+  NID_cryptocom* = 806
+  SN_id_tc26* = "id-tc26"
+  NID_id_tc26* = 974
+  SN_id_GostR3411_94_with_GostR3410_2001* = "id-GostR3411-94-with-GostR3410-2001"
+  LN_id_GostR3411_94_with_GostR3410_2001* = "GOST R 34.11-94 with GOST R 34.10-2001"
+  NID_id_GostR3411_94_with_GostR3410_2001* = 807
+  SN_id_GostR3411_94_with_GostR3410_94* = "id-GostR3411-94-with-GostR3410-94"
+  LN_id_GostR3411_94_with_GostR3410_94* = "GOST R 34.11-94 with GOST R 34.10-94"
+  NID_id_GostR3411_94_with_GostR3410_94* = 808
+  SN_id_GostR3411_94* = "md_gost94"
+  LN_id_GostR3411_94* = "GOST R 34.11-94"
+  NID_id_GostR3411_94* = 809
+  SN_id_HMACGostR3411_94* = "id-HMACGostR3411-94"
+  LN_id_HMACGostR3411_94* = "HMAC GOST 34.11-94"
+  NID_id_HMACGostR3411_94* = 810
+  SN_id_GostR3410_2001* = "gost2001"
+  LN_id_GostR3410_2001* = "GOST R 34.10-2001"
+  NID_id_GostR3410_2001* = 811
+  SN_id_GostR3410_94* = "gost94"
+  LN_id_GostR3410_94* = "GOST R 34.10-94"
+  NID_id_GostR3410_94* = 812
+  SN_id_Gost28147_89* = "gost89"
+  LN_id_Gost28147_89* = "GOST 28147-89"
+  NID_id_Gost28147_89* = 813
+  SN_gost89_cnt* = "gost89-cnt"
+  NID_gost89_cnt* = 814
+  SN_gost89_cnt_12* = "gost89-cnt-12"
+  NID_gost89_cnt_12* = 975
+  SN_gost89_cbc* = "gost89-cbc"
+  NID_gost89_cbc* = 1009
+  SN_gost89_ecb* = "gost89-ecb"
+  NID_gost89_ecb* = 1010
+  SN_gost89_ctr* = "gost89-ctr"
+  NID_gost89_ctr* = 1011
+  SN_id_Gost28147_89_MAC* = "gost-mac"
+  LN_id_Gost28147_89_MAC* = "GOST 28147-89 MAC"
+  NID_id_Gost28147_89_MAC* = 815
+  SN_gost_mac_12* = "gost-mac-12"
+  NID_gost_mac_12* = 976
+  SN_id_GostR3411_94_prf* = "prf-gostr3411-94"
+  LN_id_GostR3411_94_prf* = "GOST R 34.11-94 PRF"
+  NID_id_GostR3411_94_prf* = 816
+  SN_id_GostR3410_2001DH* = "id-GostR3410-2001DH"
+  LN_id_GostR3410_2001DH* = "GOST R 34.10-2001 DH"
+  NID_id_GostR3410_2001DH* = 817
+  SN_id_GostR3410_94DH* = "id-GostR3410-94DH"
+  LN_id_GostR3410_94DH* = "GOST R 34.10-94 DH"
+  NID_id_GostR3410_94DH* = 818
+  SN_id_Gost28147_89_CryptoPro_KeyMeshing* = "id-Gost28147-89-CryptoPro-KeyMeshing"
+  NID_id_Gost28147_89_CryptoPro_KeyMeshing* = 819
+  SN_id_Gost28147_89_None_KeyMeshing* = "id-Gost28147-89-None-KeyMeshing"
+  NID_id_Gost28147_89_None_KeyMeshing* = 820
+  SN_id_GostR3411_94_TestParamSet* = "id-GostR3411-94-TestParamSet"
+  NID_id_GostR3411_94_TestParamSet* = 821
+  SN_id_GostR3411_94_CryptoProParamSet* = "id-GostR3411-94-CryptoProParamSet"
+  NID_id_GostR3411_94_CryptoProParamSet* = 822
+  SN_id_Gost28147_89_TestParamSet* = "id-Gost28147-89-TestParamSet"
+  NID_id_Gost28147_89_TestParamSet* = 823
+  SN_id_Gost28147_89_CryptoPro_A_ParamSet* = "id-Gost28147-89-CryptoPro-A-ParamSet"
+  NID_id_Gost28147_89_CryptoPro_A_ParamSet* = 824
+  SN_id_Gost28147_89_CryptoPro_B_ParamSet* = "id-Gost28147-89-CryptoPro-B-ParamSet"
+  NID_id_Gost28147_89_CryptoPro_B_ParamSet* = 825
+  SN_id_Gost28147_89_CryptoPro_C_ParamSet* = "id-Gost28147-89-CryptoPro-C-ParamSet"
+  NID_id_Gost28147_89_CryptoPro_C_ParamSet* = 826
+  SN_id_Gost28147_89_CryptoPro_D_ParamSet* = "id-Gost28147-89-CryptoPro-D-ParamSet"
+  NID_id_Gost28147_89_CryptoPro_D_ParamSet* = 827
+  SN_id_Gost28147_89_CryptoPro_Oscar_1_1_ParamSet* = "id-Gost28147-89-CryptoPro-Oscar-1-1-ParamSet"
+  NID_id_Gost28147_89_CryptoPro_Oscar_1_1_ParamSet* = 828
+  SN_id_Gost28147_89_CryptoPro_Oscar_1_0_ParamSet* = "id-Gost28147-89-CryptoPro-Oscar-1-0-ParamSet"
+  NID_id_Gost28147_89_CryptoPro_Oscar_1_0_ParamSet* = 829
+  SN_id_Gost28147_89_CryptoPro_RIC_1_ParamSet* = "id-Gost28147-89-CryptoPro-RIC-1-ParamSet"
+  NID_id_Gost28147_89_CryptoPro_RIC_1_ParamSet* = 830
+  SN_id_GostR3410_94_TestParamSet* = "id-GostR3410-94-TestParamSet"
+  NID_id_GostR3410_94_TestParamSet* = 831
+  SN_id_GostR3410_94_CryptoPro_A_ParamSet* = "id-GostR3410-94-CryptoPro-A-ParamSet"
+  NID_id_GostR3410_94_CryptoPro_A_ParamSet* = 832
+  SN_id_GostR3410_94_CryptoPro_B_ParamSet* = "id-GostR3410-94-CryptoPro-B-ParamSet"
+  NID_id_GostR3410_94_CryptoPro_B_ParamSet* = 833
+  SN_id_GostR3410_94_CryptoPro_C_ParamSet* = "id-GostR3410-94-CryptoPro-C-ParamSet"
+  NID_id_GostR3410_94_CryptoPro_C_ParamSet* = 834
+  SN_id_GostR3410_94_CryptoPro_D_ParamSet* = "id-GostR3410-94-CryptoPro-D-ParamSet"
+  NID_id_GostR3410_94_CryptoPro_D_ParamSet* = 835
+  SN_id_GostR3410_94_CryptoPro_XchA_ParamSet* = "id-GostR3410-94-CryptoPro-XchA-ParamSet"
+  NID_id_GostR3410_94_CryptoPro_XchA_ParamSet* = 836
+  SN_id_GostR3410_94_CryptoPro_XchB_ParamSet* = "id-GostR3410-94-CryptoPro-XchB-ParamSet"
+  NID_id_GostR3410_94_CryptoPro_XchB_ParamSet* = 837
+  SN_id_GostR3410_94_CryptoPro_XchC_ParamSet* = "id-GostR3410-94-CryptoPro-XchC-ParamSet"
+  NID_id_GostR3410_94_CryptoPro_XchC_ParamSet* = 838
+  SN_id_GostR3410_2001_TestParamSet* = "id-GostR3410-2001-TestParamSet"
+  NID_id_GostR3410_2001_TestParamSet* = 839
+  SN_id_GostR3410_2001_CryptoPro_A_ParamSet* = "id-GostR3410-2001-CryptoPro-A-ParamSet"
+  NID_id_GostR3410_2001_CryptoPro_A_ParamSet* = 840
+  SN_id_GostR3410_2001_CryptoPro_B_ParamSet* = "id-GostR3410-2001-CryptoPro-B-ParamSet"
+  NID_id_GostR3410_2001_CryptoPro_B_ParamSet* = 841
+  SN_id_GostR3410_2001_CryptoPro_C_ParamSet* = "id-GostR3410-2001-CryptoPro-C-ParamSet"
+  NID_id_GostR3410_2001_CryptoPro_C_ParamSet* = 842
+  SN_id_GostR3410_2001_CryptoPro_XchA_ParamSet* = "id-GostR3410-2001-CryptoPro-XchA-ParamSet"
+  NID_id_GostR3410_2001_CryptoPro_XchA_ParamSet* = 843
+  SN_id_GostR3410_2001_CryptoPro_XchB_ParamSet* = "id-GostR3410-2001-CryptoPro-XchB-ParamSet"
+  NID_id_GostR3410_2001_CryptoPro_XchB_ParamSet* = 844
+  SN_id_GostR3410_94_a* = "id-GostR3410-94-a"
+  NID_id_GostR3410_94_a* = 845
+  SN_id_GostR3410_94_aBis* = "id-GostR3410-94-aBis"
+  NID_id_GostR3410_94_aBis* = 846
+  SN_id_GostR3410_94_b* = "id-GostR3410-94-b"
+  NID_id_GostR3410_94_b* = 847
+  SN_id_GostR3410_94_bBis* = "id-GostR3410-94-bBis"
+  NID_id_GostR3410_94_bBis* = 848
+  SN_id_Gost28147_89_cc* = "id-Gost28147-89-cc"
+  LN_id_Gost28147_89_cc* = "GOST 28147-89 Cryptocom ParamSet"
+  NID_id_Gost28147_89_cc* = 849
+  SN_id_GostR3410_94_cc* = "gost94cc"
+  LN_id_GostR3410_94_cc* = "GOST 34.10-94 Cryptocom"
+  NID_id_GostR3410_94_cc* = 850
+  SN_id_GostR3410_2001_cc* = "gost2001cc"
+  LN_id_GostR3410_2001_cc* = "GOST 34.10-2001 Cryptocom"
+  NID_id_GostR3410_2001_cc* = 851
+  SN_id_GostR3411_94_with_GostR3410_94_cc* = "id-GostR3411-94-with-GostR3410-94-cc"
+  LN_id_GostR3411_94_with_GostR3410_94_cc* = "GOST R 34.11-94 with GOST R 34.10-94 Cryptocom"
+  NID_id_GostR3411_94_with_GostR3410_94_cc* = 852
+  SN_id_GostR3411_94_with_GostR3410_2001_cc* = "id-GostR3411-94-with-GostR3410-2001-cc"
+  LN_id_GostR3411_94_with_GostR3410_2001_cc* = "GOST R 34.11-94 with GOST R 34.10-2001 Cryptocom"
+  NID_id_GostR3411_94_with_GostR3410_2001_cc* = 853
+  SN_id_GostR3410_2001_ParamSet_cc* = "id-GostR3410-2001-ParamSet-cc"
+  LN_id_GostR3410_2001_ParamSet_cc* = "GOST R 3410-2001 Parameter Set Cryptocom"
+  NID_id_GostR3410_2001_ParamSet_cc* = 854
+  SN_id_tc26_algorithms* = "id-tc26-algorithms"
+  NID_id_tc26_algorithms* = 977
+  SN_id_tc26_sign* = "id-tc26-sign"
+  NID_id_tc26_sign* = 978
+  SN_id_GostR3410_2012_256* = "gost2012_256"
+  LN_id_GostR3410_2012_256* = "GOST R 34.10-2012 with 256 bit modulus"
+  NID_id_GostR3410_2012_256* = 979
+  SN_id_GostR3410_2012_512* = "gost2012_512"
+  LN_id_GostR3410_2012_512* = "GOST R 34.10-2012 with 512 bit modulus"
+  NID_id_GostR3410_2012_512* = 980
+  SN_id_tc26_digest* = "id-tc26-digest"
+  NID_id_tc26_digest* = 981
+  SN_id_GostR3411_2012_256* = "md_gost12_256"
+  LN_id_GostR3411_2012_256* = "GOST R 34.11-2012 with 256 bit hash"
+  NID_id_GostR3411_2012_256* = 982
+  SN_id_GostR3411_2012_512* = "md_gost12_512"
+  LN_id_GostR3411_2012_512* = "GOST R 34.11-2012 with 512 bit hash"
+  NID_id_GostR3411_2012_512* = 983
+  SN_id_tc26_signwithdigest* = "id-tc26-signwithdigest"
+  NID_id_tc26_signwithdigest* = 984
+  SN_id_tc26_signwithdigest_gost3410_2012_256* = "id-tc26-signwithdigest-gost3410-2012-256"
+  LN_id_tc26_signwithdigest_gost3410_2012_256* = "GOST R 34.10-2012 with GOST R 34.11-2012 (256 bit)"
+  NID_id_tc26_signwithdigest_gost3410_2012_256* = 985
+  SN_id_tc26_signwithdigest_gost3410_2012_512* = "id-tc26-signwithdigest-gost3410-2012-512"
+  LN_id_tc26_signwithdigest_gost3410_2012_512* = "GOST R 34.10-2012 with GOST R 34.11-2012 (512 bit)"
+  NID_id_tc26_signwithdigest_gost3410_2012_512* = 986
+  SN_id_tc26_mac* = "id-tc26-mac"
+  NID_id_tc26_mac* = 987
+  SN_id_tc26_hmac_gost_3411_2012_256* = "id-tc26-hmac-gost-3411-2012-256"
+  LN_id_tc26_hmac_gost_3411_2012_256* = "HMAC GOST 34.11-2012 256 bit"
+  NID_id_tc26_hmac_gost_3411_2012_256* = 988
+  SN_id_tc26_hmac_gost_3411_2012_512* = "id-tc26-hmac-gost-3411-2012-512"
+  LN_id_tc26_hmac_gost_3411_2012_512* = "HMAC GOST 34.11-2012 512 bit"
+  NID_id_tc26_hmac_gost_3411_2012_512* = 989
+  SN_id_tc26_cipher* = "id-tc26-cipher"
+  NID_id_tc26_cipher* = 990
+  SN_id_tc26_cipher_gostr3412_2015_magma* = "id-tc26-cipher-gostr3412-2015-magma"
+  NID_id_tc26_cipher_gostr3412_2015_magma* = 1173
+  SN_magma_ctr_acpkm* = "magma-ctr-acpkm"
+  NID_magma_ctr_acpkm* = 1174
+  SN_magma_ctr_acpkm_omac* = "magma-ctr-acpkm-omac"
+  NID_magma_ctr_acpkm_omac* = 1175
+  SN_id_tc26_cipher_gostr3412_2015_kuznyechik* = "id-tc26-cipher-gostr3412-2015-kuznyechik"
+  NID_id_tc26_cipher_gostr3412_2015_kuznyechik* = 1176
+  SN_kuznyechik_ctr_acpkm* = "kuznyechik-ctr-acpkm"
+  NID_kuznyechik_ctr_acpkm* = 1177
+  SN_kuznyechik_ctr_acpkm_omac* = "kuznyechik-ctr-acpkm-omac"
+  NID_kuznyechik_ctr_acpkm_omac* = 1178
+  SN_id_tc26_agreement* = "id-tc26-agreement"
+  NID_id_tc26_agreement* = 991
+  SN_id_tc26_agreement_gost_3410_2012_256* = "id-tc26-agreement-gost-3410-2012-256"
+  NID_id_tc26_agreement_gost_3410_2012_256* = 992
+  SN_id_tc26_agreement_gost_3410_2012_512* = "id-tc26-agreement-gost-3410-2012-512"
+  NID_id_tc26_agreement_gost_3410_2012_512* = 993
+  SN_id_tc26_wrap* = "id-tc26-wrap"
+  NID_id_tc26_wrap* = 1179
+  SN_id_tc26_wrap_gostr3412_2015_magma* = "id-tc26-wrap-gostr3412-2015-magma"
+  NID_id_tc26_wrap_gostr3412_2015_magma* = 1180
+  SN_magma_kexp15* = "magma-kexp15"
+  NID_magma_kexp15* = 1181
+  SN_id_tc26_wrap_gostr3412_2015_kuznyechik* = "id-tc26-wrap-gostr3412-2015-kuznyechik"
+  NID_id_tc26_wrap_gostr3412_2015_kuznyechik* = 1182
+  SN_kuznyechik_kexp15* = "kuznyechik-kexp15"
+  NID_kuznyechik_kexp15* = 1183
+  SN_id_tc26_constants* = "id-tc26-constants"
+  NID_id_tc26_constants* = 994
+  SN_id_tc26_sign_constants* = "id-tc26-sign-constants"
+  NID_id_tc26_sign_constants* = 995
+  SN_id_tc26_gost_3410_2012_256_constants* = "id-tc26-gost-3410-2012-256-constants"
+  NID_id_tc26_gost_3410_2012_256_constants* = 1147
+  SN_id_tc26_gost_3410_2012_256_paramSetA* = "id-tc26-gost-3410-2012-256-paramSetA"
+  LN_id_tc26_gost_3410_2012_256_paramSetA* = "GOST R 34.10-2012 (256 bit) ParamSet A"
+  NID_id_tc26_gost_3410_2012_256_paramSetA* = 1148
+  SN_id_tc26_gost_3410_2012_256_paramSetB* = "id-tc26-gost-3410-2012-256-paramSetB"
+  LN_id_tc26_gost_3410_2012_256_paramSetB* = "GOST R 34.10-2012 (256 bit) ParamSet B"
+  NID_id_tc26_gost_3410_2012_256_paramSetB* = 1184
+  SN_id_tc26_gost_3410_2012_256_paramSetC* = "id-tc26-gost-3410-2012-256-paramSetC"
+  LN_id_tc26_gost_3410_2012_256_paramSetC* = "GOST R 34.10-2012 (256 bit) ParamSet C"
+  NID_id_tc26_gost_3410_2012_256_paramSetC* = 1185
+  SN_id_tc26_gost_3410_2012_256_paramSetD* = "id-tc26-gost-3410-2012-256-paramSetD"
+  LN_id_tc26_gost_3410_2012_256_paramSetD* = "GOST R 34.10-2012 (256 bit) ParamSet D"
+  NID_id_tc26_gost_3410_2012_256_paramSetD* = 1186
+  SN_id_tc26_gost_3410_2012_512_constants* = "id-tc26-gost-3410-2012-512-constants"
+  NID_id_tc26_gost_3410_2012_512_constants* = 996
+  SN_id_tc26_gost_3410_2012_512_paramSetTest* = "id-tc26-gost-3410-2012-512-paramSetTest"
+  LN_id_tc26_gost_3410_2012_512_paramSetTest* = "GOST R 34.10-2012 (512 bit) testing parameter set"
+  NID_id_tc26_gost_3410_2012_512_paramSetTest* = 997
+  SN_id_tc26_gost_3410_2012_512_paramSetA* = "id-tc26-gost-3410-2012-512-paramSetA"
+  LN_id_tc26_gost_3410_2012_512_paramSetA* = "GOST R 34.10-2012 (512 bit) ParamSet A"
+  NID_id_tc26_gost_3410_2012_512_paramSetA* = 998
+  SN_id_tc26_gost_3410_2012_512_paramSetB* = "id-tc26-gost-3410-2012-512-paramSetB"
+  LN_id_tc26_gost_3410_2012_512_paramSetB* = "GOST R 34.10-2012 (512 bit) ParamSet B"
+  NID_id_tc26_gost_3410_2012_512_paramSetB* = 999
+  SN_id_tc26_gost_3410_2012_512_paramSetC* = "id-tc26-gost-3410-2012-512-paramSetC"
+  LN_id_tc26_gost_3410_2012_512_paramSetC* = "GOST R 34.10-2012 (512 bit) ParamSet C"
+  NID_id_tc26_gost_3410_2012_512_paramSetC* = 1149
+  SN_id_tc26_digest_constants* = "id-tc26-digest-constants"
+  NID_id_tc26_digest_constants* = 1000
+  SN_id_tc26_cipher_constants* = "id-tc26-cipher-constants"
+  NID_id_tc26_cipher_constants* = 1001
+  SN_id_tc26_gost_28147_constants* = "id-tc26-gost-28147-constants"
+  NID_id_tc26_gost_28147_constants* = 1002
+  SN_id_tc26_gost_28147_param_Z* = "id-tc26-gost-28147-param-Z"
+  LN_id_tc26_gost_28147_param_Z* = "GOST 28147-89 TC26 parameter set"
+  NID_id_tc26_gost_28147_param_Z* = 1003
+  SN_INN* = "INN"
+  LN_INN* = "INN"
+  NID_INN* = 1004
+  SN_OGRN* = "OGRN"
+  LN_OGRN* = "OGRN"
+  NID_OGRN* = 1005
+  SN_SNILS* = "SNILS"
+  LN_SNILS* = "SNILS"
+  NID_SNILS* = 1006
+  SN_OGRNIP* = "OGRNIP"
+  LN_OGRNIP* = "OGRNIP"
+  NID_OGRNIP* = 1226
+  SN_subjectSignTool* = "subjectSignTool"
+  LN_subjectSignTool* = "Signing Tool of Subject"
+  NID_subjectSignTool* = 1007
+  SN_issuerSignTool* = "issuerSignTool"
+  LN_issuerSignTool* = "Signing Tool of Issuer"
+  NID_issuerSignTool* = 1008
+  SN_classSignTool* = "classSignTool"
+  LN_classSignTool* = "Class of Signing Tool"
+  NID_classSignTool* = 1227
+  SN_classSignToolKC1* = "classSignToolKC1"
+  LN_classSignToolKC1* = "Class of Signing Tool KC1"
+  NID_classSignToolKC1* = 1228
+  SN_classSignToolKC2* = "classSignToolKC2"
+  LN_classSignToolKC2* = "Class of Signing Tool KC2"
+  NID_classSignToolKC2* = 1229
+  SN_classSignToolKC3* = "classSignToolKC3"
+  LN_classSignToolKC3* = "Class of Signing Tool KC3"
+  NID_classSignToolKC3* = 1230
+  SN_classSignToolKB1* = "classSignToolKB1"
+  LN_classSignToolKB1* = "Class of Signing Tool KB1"
+  NID_classSignToolKB1* = 1231
+  SN_classSignToolKB2* = "classSignToolKB2"
+  LN_classSignToolKB2* = "Class of Signing Tool KB2"
+  NID_classSignToolKB2* = 1232
+  SN_classSignToolKA1* = "classSignToolKA1"
+  LN_classSignToolKA1* = "Class of Signing Tool KA1"
+  NID_classSignToolKA1* = 1233
+  SN_kuznyechik_ecb* = "kuznyechik-ecb"
+  NID_kuznyechik_ecb* = 1012
+  SN_kuznyechik_ctr* = "kuznyechik-ctr"
+  NID_kuznyechik_ctr* = 1013
+  SN_kuznyechik_ofb* = "kuznyechik-ofb"
+  NID_kuznyechik_ofb* = 1014
+  SN_kuznyechik_cbc* = "kuznyechik-cbc"
+  NID_kuznyechik_cbc* = 1015
+  SN_kuznyechik_cfb* = "kuznyechik-cfb"
+  NID_kuznyechik_cfb* = 1016
+  SN_kuznyechik_mac* = "kuznyechik-mac"
+  NID_kuznyechik_mac* = 1017
+  SN_magma_ecb* = "magma-ecb"
+  NID_magma_ecb* = 1187
+  SN_magma_ctr* = "magma-ctr"
+  NID_magma_ctr* = 1188
+  SN_magma_ofb* = "magma-ofb"
+  NID_magma_ofb* = 1189
+  SN_magma_cbc* = "magma-cbc"
+  NID_magma_cbc* = 1190
+  SN_magma_cfb* = "magma-cfb"
+  NID_magma_cfb* = 1191
+  SN_magma_mac* = "magma-mac"
+  NID_magma_mac* = 1192
+  SN_camellia_128_cbc* = "CAMELLIA-128-CBC"
+  LN_camellia_128_cbc* = "camellia-128-cbc"
+  NID_camellia_128_cbc* = 751
+  SN_camellia_192_cbc* = "CAMELLIA-192-CBC"
+  LN_camellia_192_cbc* = "camellia-192-cbc"
+  NID_camellia_192_cbc* = 752
+  SN_camellia_256_cbc* = "CAMELLIA-256-CBC"
+  LN_camellia_256_cbc* = "camellia-256-cbc"
+  NID_camellia_256_cbc* = 753
+  SN_id_camellia128_wrap* = "id-camellia128-wrap"
+  NID_id_camellia128_wrap* = 907
+  SN_id_camellia192_wrap* = "id-camellia192-wrap"
+  NID_id_camellia192_wrap* = 908
+  SN_id_camellia256_wrap* = "id-camellia256-wrap"
+  NID_id_camellia256_wrap* = 909
+  SN_camellia_128_ecb* = "CAMELLIA-128-ECB"
+  LN_camellia_128_ecb* = "camellia-128-ecb"
+  NID_camellia_128_ecb* = 754
+  SN_camellia_128_ofb128* = "CAMELLIA-128-OFB"
+  LN_camellia_128_ofb128* = "camellia-128-ofb"
+  NID_camellia_128_ofb128* = 766
+  SN_camellia_128_cfb128* = "CAMELLIA-128-CFB"
+  LN_camellia_128_cfb128* = "camellia-128-cfb"
+  NID_camellia_128_cfb128* = 757
+  SN_camellia_128_gcm* = "CAMELLIA-128-GCM"
+  LN_camellia_128_gcm* = "camellia-128-gcm"
+  NID_camellia_128_gcm* = 961
+  SN_camellia_128_ccm* = "CAMELLIA-128-CCM"
+  LN_camellia_128_ccm* = "camellia-128-ccm"
+  NID_camellia_128_ccm* = 962
+  SN_camellia_128_ctr* = "CAMELLIA-128-CTR"
+  LN_camellia_128_ctr* = "camellia-128-ctr"
+  NID_camellia_128_ctr* = 963
+  SN_camellia_128_cmac* = "CAMELLIA-128-CMAC"
+  LN_camellia_128_cmac* = "camellia-128-cmac"
+  NID_camellia_128_cmac* = 964
+  SN_camellia_192_ecb* = "CAMELLIA-192-ECB"
+  LN_camellia_192_ecb* = "camellia-192-ecb"
+  NID_camellia_192_ecb* = 755
+  SN_camellia_192_ofb128* = "CAMELLIA-192-OFB"
+  LN_camellia_192_ofb128* = "camellia-192-ofb"
+  NID_camellia_192_ofb128* = 767
+  SN_camellia_192_cfb128* = "CAMELLIA-192-CFB"
+  LN_camellia_192_cfb128* = "camellia-192-cfb"
+  NID_camellia_192_cfb128* = 758
+  SN_camellia_192_gcm* = "CAMELLIA-192-GCM"
+  LN_camellia_192_gcm* = "camellia-192-gcm"
+  NID_camellia_192_gcm* = 965
+  SN_camellia_192_ccm* = "CAMELLIA-192-CCM"
+  LN_camellia_192_ccm* = "camellia-192-ccm"
+  NID_camellia_192_ccm* = 966
+  SN_camellia_192_ctr* = "CAMELLIA-192-CTR"
+  LN_camellia_192_ctr* = "camellia-192-ctr"
+  NID_camellia_192_ctr* = 967
+  SN_camellia_192_cmac* = "CAMELLIA-192-CMAC"
+  LN_camellia_192_cmac* = "camellia-192-cmac"
+  NID_camellia_192_cmac* = 968
+  SN_camellia_256_ecb* = "CAMELLIA-256-ECB"
+  LN_camellia_256_ecb* = "camellia-256-ecb"
+  NID_camellia_256_ecb* = 756
+  SN_camellia_256_ofb128* = "CAMELLIA-256-OFB"
+  LN_camellia_256_ofb128* = "camellia-256-ofb"
+  NID_camellia_256_ofb128* = 768
+  SN_camellia_256_cfb128* = "CAMELLIA-256-CFB"
+  LN_camellia_256_cfb128* = "camellia-256-cfb"
+  NID_camellia_256_cfb128* = 759
+  SN_camellia_256_gcm* = "CAMELLIA-256-GCM"
+  LN_camellia_256_gcm* = "camellia-256-gcm"
+  NID_camellia_256_gcm* = 969
+  SN_camellia_256_ccm* = "CAMELLIA-256-CCM"
+  LN_camellia_256_ccm* = "camellia-256-ccm"
+  NID_camellia_256_ccm* = 970
+  SN_camellia_256_ctr* = "CAMELLIA-256-CTR"
+  LN_camellia_256_ctr* = "camellia-256-ctr"
+  NID_camellia_256_ctr* = 971
+  SN_camellia_256_cmac* = "CAMELLIA-256-CMAC"
+  LN_camellia_256_cmac* = "camellia-256-cmac"
+  NID_camellia_256_cmac* = 972
+  SN_camellia_128_cfb1* = "CAMELLIA-128-CFB1"
+  LN_camellia_128_cfb1* = "camellia-128-cfb1"
+  NID_camellia_128_cfb1* = 760
+  SN_camellia_192_cfb1* = "CAMELLIA-192-CFB1"
+  LN_camellia_192_cfb1* = "camellia-192-cfb1"
+  NID_camellia_192_cfb1* = 761
+  SN_camellia_256_cfb1* = "CAMELLIA-256-CFB1"
+  LN_camellia_256_cfb1* = "camellia-256-cfb1"
+  NID_camellia_256_cfb1* = 762
+  SN_camellia_128_cfb8* = "CAMELLIA-128-CFB8"
+  LN_camellia_128_cfb8* = "camellia-128-cfb8"
+  NID_camellia_128_cfb8* = 763
+  SN_camellia_192_cfb8* = "CAMELLIA-192-CFB8"
+  LN_camellia_192_cfb8* = "camellia-192-cfb8"
+  NID_camellia_192_cfb8* = 764
+  SN_camellia_256_cfb8* = "CAMELLIA-256-CFB8"
+  LN_camellia_256_cfb8* = "camellia-256-cfb8"
+  NID_camellia_256_cfb8* = 765
+  SN_aria_128_ecb* = "ARIA-128-ECB"
+  LN_aria_128_ecb* = "aria-128-ecb"
+  NID_aria_128_ecb* = 1065
+  SN_aria_128_cbc* = "ARIA-128-CBC"
+  LN_aria_128_cbc* = "aria-128-cbc"
+  NID_aria_128_cbc* = 1066
+  SN_aria_128_cfb128* = "ARIA-128-CFB"
+  LN_aria_128_cfb128* = "aria-128-cfb"
+  NID_aria_128_cfb128* = 1067
+  SN_aria_128_ofb128* = "ARIA-128-OFB"
+  LN_aria_128_ofb128* = "aria-128-ofb"
+  NID_aria_128_ofb128* = 1068
+  SN_aria_128_ctr* = "ARIA-128-CTR"
+  LN_aria_128_ctr* = "aria-128-ctr"
+  NID_aria_128_ctr* = 1069
+  SN_aria_192_ecb* = "ARIA-192-ECB"
+  LN_aria_192_ecb* = "aria-192-ecb"
+  NID_aria_192_ecb* = 1070
+  SN_aria_192_cbc* = "ARIA-192-CBC"
+  LN_aria_192_cbc* = "aria-192-cbc"
+  NID_aria_192_cbc* = 1071
+  SN_aria_192_cfb128* = "ARIA-192-CFB"
+  LN_aria_192_cfb128* = "aria-192-cfb"
+  NID_aria_192_cfb128* = 1072
+  SN_aria_192_ofb128* = "ARIA-192-OFB"
+  LN_aria_192_ofb128* = "aria-192-ofb"
+  NID_aria_192_ofb128* = 1073
+  SN_aria_192_ctr* = "ARIA-192-CTR"
+  LN_aria_192_ctr* = "aria-192-ctr"
+  NID_aria_192_ctr* = 1074
+  SN_aria_256_ecb* = "ARIA-256-ECB"
+  LN_aria_256_ecb* = "aria-256-ecb"
+  NID_aria_256_ecb* = 1075
+  SN_aria_256_cbc* = "ARIA-256-CBC"
+  LN_aria_256_cbc* = "aria-256-cbc"
+  NID_aria_256_cbc* = 1076
+  SN_aria_256_cfb128* = "ARIA-256-CFB"
+  LN_aria_256_cfb128* = "aria-256-cfb"
+  NID_aria_256_cfb128* = 1077
+  SN_aria_256_ofb128* = "ARIA-256-OFB"
+  LN_aria_256_ofb128* = "aria-256-ofb"
+  NID_aria_256_ofb128* = 1078
+  SN_aria_256_ctr* = "ARIA-256-CTR"
+  LN_aria_256_ctr* = "aria-256-ctr"
+  NID_aria_256_ctr* = 1079
+  SN_aria_128_cfb1* = "ARIA-128-CFB1"
+  LN_aria_128_cfb1* = "aria-128-cfb1"
+  NID_aria_128_cfb1* = 1080
+  SN_aria_192_cfb1* = "ARIA-192-CFB1"
+  LN_aria_192_cfb1* = "aria-192-cfb1"
+  NID_aria_192_cfb1* = 1081
+  SN_aria_256_cfb1* = "ARIA-256-CFB1"
+  LN_aria_256_cfb1* = "aria-256-cfb1"
+  NID_aria_256_cfb1* = 1082
+  SN_aria_128_cfb8* = "ARIA-128-CFB8"
+  LN_aria_128_cfb8* = "aria-128-cfb8"
+  NID_aria_128_cfb8* = 1083
+  SN_aria_192_cfb8* = "ARIA-192-CFB8"
+  LN_aria_192_cfb8* = "aria-192-cfb8"
+  NID_aria_192_cfb8* = 1084
+  SN_aria_256_cfb8* = "ARIA-256-CFB8"
+  LN_aria_256_cfb8* = "aria-256-cfb8"
+  NID_aria_256_cfb8* = 1085
+  SN_aria_128_ccm* = "ARIA-128-CCM"
+  LN_aria_128_ccm* = "aria-128-ccm"
+  NID_aria_128_ccm* = 1120
+  SN_aria_192_ccm* = "ARIA-192-CCM"
+  LN_aria_192_ccm* = "aria-192-ccm"
+  NID_aria_192_ccm* = 1121
+  SN_aria_256_ccm* = "ARIA-256-CCM"
+  LN_aria_256_ccm* = "aria-256-ccm"
+  NID_aria_256_ccm* = 1122
+  SN_aria_128_gcm* = "ARIA-128-GCM"
+  LN_aria_128_gcm* = "aria-128-gcm"
+  NID_aria_128_gcm* = 1123
+  SN_aria_192_gcm* = "ARIA-192-GCM"
+  LN_aria_192_gcm* = "aria-192-gcm"
+  NID_aria_192_gcm* = 1124
+  SN_aria_256_gcm* = "ARIA-256-GCM"
+  LN_aria_256_gcm* = "aria-256-gcm"
+  NID_aria_256_gcm* = 1125
+  SN_kisa* = "KISA"
+  LN_kisa* = "kisa"
+  NID_kisa* = 773
+  SN_seed_ecb* = "SEED-ECB"
+  LN_seed_ecb* = "seed-ecb"
+  NID_seed_ecb* = 776
+  SN_seed_cbc* = "SEED-CBC"
+  LN_seed_cbc* = "seed-cbc"
+  NID_seed_cbc* = 777
+  SN_seed_cfb128* = "SEED-CFB"
+  LN_seed_cfb128* = "seed-cfb"
+  NID_seed_cfb128* = 779
+  SN_seed_ofb128* = "SEED-OFB"
+  LN_seed_ofb128* = "seed-ofb"
+  NID_seed_ofb128* = 778
+  SN_sm4_ecb* = "SM4-ECB"
+  LN_sm4_ecb* = "sm4-ecb"
+  NID_sm4_ecb* = 1133
+  SN_sm4_cbc* = "SM4-CBC"
+  LN_sm4_cbc* = "sm4-cbc"
+  NID_sm4_cbc* = 1134
+  SN_sm4_ofb128* = "SM4-OFB"
+  LN_sm4_ofb128* = "sm4-ofb"
+  NID_sm4_ofb128* = 1135
+  SN_sm4_cfb128* = "SM4-CFB"
+  LN_sm4_cfb128* = "sm4-cfb"
+  NID_sm4_cfb128* = 1137
+  SN_sm4_cfb1* = "SM4-CFB1"
+  LN_sm4_cfb1* = "sm4-cfb1"
+  NID_sm4_cfb1* = 1136
+  SN_sm4_cfb8* = "SM4-CFB8"
+  LN_sm4_cfb8* = "sm4-cfb8"
+  NID_sm4_cfb8* = 1138
+  SN_sm4_ctr* = "SM4-CTR"
+  LN_sm4_ctr* = "sm4-ctr"
+  NID_sm4_ctr* = 1139
+  SN_sm4_gcm* = "SM4-GCM"
+  LN_sm4_gcm* = "sm4-gcm"
+  NID_sm4_gcm* = 1248
+  SN_sm4_ccm* = "SM4-CCM"
+  LN_sm4_ccm* = "sm4-ccm"
+  NID_sm4_ccm* = 1249
+  SN_sm4_xts* = "SM4-XTS"
+  LN_sm4_xts* = "sm4-xts"
+  NID_sm4_xts* = 1290
+  SN_hmac* = "HMAC"
+  LN_hmac* = "hmac"
+  NID_hmac* = 855
+  SN_cmac* = "CMAC"
+  LN_cmac* = "cmac"
+  NID_cmac* = 894
+  SN_rc4_hmac_md5* = "RC4-HMAC-MD5"
+  LN_rc4_hmac_md5* = "rc4-hmac-md5"
+  NID_rc4_hmac_md5* = 915
+  SN_aes_128_cbc_hmac_sha1* = "AES-128-CBC-HMAC-SHA1"
+  LN_aes_128_cbc_hmac_sha1* = "aes-128-cbc-hmac-sha1"
+  NID_aes_128_cbc_hmac_sha1* = 916
+  SN_aes_192_cbc_hmac_sha1* = "AES-192-CBC-HMAC-SHA1"
+  LN_aes_192_cbc_hmac_sha1* = "aes-192-cbc-hmac-sha1"
+  NID_aes_192_cbc_hmac_sha1* = 917
+  SN_aes_256_cbc_hmac_sha1* = "AES-256-CBC-HMAC-SHA1"
+  LN_aes_256_cbc_hmac_sha1* = "aes-256-cbc-hmac-sha1"
+  NID_aes_256_cbc_hmac_sha1* = 918
+  SN_aes_128_cbc_hmac_sha256* = "AES-128-CBC-HMAC-SHA256"
+  LN_aes_128_cbc_hmac_sha256* = "aes-128-cbc-hmac-sha256"
+  NID_aes_128_cbc_hmac_sha256* = 948
+  SN_aes_192_cbc_hmac_sha256* = "AES-192-CBC-HMAC-SHA256"
+  LN_aes_192_cbc_hmac_sha256* = "aes-192-cbc-hmac-sha256"
+  NID_aes_192_cbc_hmac_sha256* = 949
+  SN_aes_256_cbc_hmac_sha256* = "AES-256-CBC-HMAC-SHA256"
+  LN_aes_256_cbc_hmac_sha256* = "aes-256-cbc-hmac-sha256"
+  NID_aes_256_cbc_hmac_sha256* = 950
+  SN_chacha20_poly1305* = "ChaCha20-Poly1305"
+  LN_chacha20_poly1305* = "chacha20-poly1305"
+  NID_chacha20_poly1305* = 1018
+  SN_chacha20* = "ChaCha20"
+  LN_chacha20* = "chacha20"
+  NID_chacha20* = 1019
+  SN_dhpublicnumber* = "dhpublicnumber"
+  LN_dhpublicnumber* = "X9.42 DH"
+  NID_dhpublicnumber* = 920
+  SN_brainpoolP160r1* = "brainpoolP160r1"
+  NID_brainpoolP160r1* = 921
+  SN_brainpoolP160t1* = "brainpoolP160t1"
+  NID_brainpoolP160t1* = 922
+  SN_brainpoolP192r1* = "brainpoolP192r1"
+  NID_brainpoolP192r1* = 923
+  SN_brainpoolP192t1* = "brainpoolP192t1"
+  NID_brainpoolP192t1* = 924
+  SN_brainpoolP224r1* = "brainpoolP224r1"
+  NID_brainpoolP224r1* = 925
+  SN_brainpoolP224t1* = "brainpoolP224t1"
+  NID_brainpoolP224t1* = 926
+  SN_brainpoolP256r1* = "brainpoolP256r1"
+  NID_brainpoolP256r1* = 927
+  SN_brainpoolP256r1tls13* = "brainpoolP256r1tls13"
+  NID_brainpoolP256r1tls13* = 1285
+  SN_brainpoolP256t1* = "brainpoolP256t1"
+  NID_brainpoolP256t1* = 928
+  SN_brainpoolP320r1* = "brainpoolP320r1"
+  NID_brainpoolP320r1* = 929
+  SN_brainpoolP320t1* = "brainpoolP320t1"
+  NID_brainpoolP320t1* = 930
+  SN_brainpoolP384r1* = "brainpoolP384r1"
+  NID_brainpoolP384r1* = 931
+  SN_brainpoolP384r1tls13* = "brainpoolP384r1tls13"
+  NID_brainpoolP384r1tls13* = 1286
+  SN_brainpoolP384t1* = "brainpoolP384t1"
+  NID_brainpoolP384t1* = 932
+  SN_brainpoolP512r1* = "brainpoolP512r1"
+  NID_brainpoolP512r1* = 933
+  SN_brainpoolP512r1tls13* = "brainpoolP512r1tls13"
+  NID_brainpoolP512r1tls13* = 1287
+  SN_brainpoolP512t1* = "brainpoolP512t1"
+  NID_brainpoolP512t1* = 934
+  SN_dhSinglePass_stdDH_sha1kdf_scheme* = "dhSinglePass-stdDH-sha1kdf-scheme"
+  NID_dhSinglePass_stdDH_sha1kdf_scheme* = 936
+  SN_dhSinglePass_stdDH_sha224kdf_scheme* = "dhSinglePass-stdDH-sha224kdf-scheme"
+  NID_dhSinglePass_stdDH_sha224kdf_scheme* = 937
+  SN_dhSinglePass_stdDH_sha256kdf_scheme* = "dhSinglePass-stdDH-sha256kdf-scheme"
+  NID_dhSinglePass_stdDH_sha256kdf_scheme* = 938
+  SN_dhSinglePass_stdDH_sha384kdf_scheme* = "dhSinglePass-stdDH-sha384kdf-scheme"
+  NID_dhSinglePass_stdDH_sha384kdf_scheme* = 939
+  SN_dhSinglePass_stdDH_sha512kdf_scheme* = "dhSinglePass-stdDH-sha512kdf-scheme"
+  NID_dhSinglePass_stdDH_sha512kdf_scheme* = 940
+  SN_dhSinglePass_cofactorDH_sha1kdf_scheme* = "dhSinglePass-cofactorDH-sha1kdf-scheme"
+  NID_dhSinglePass_cofactorDH_sha1kdf_scheme* = 941
+  SN_dhSinglePass_cofactorDH_sha224kdf_scheme* = "dhSinglePass-cofactorDH-sha224kdf-scheme"
+  NID_dhSinglePass_cofactorDH_sha224kdf_scheme* = 942
+  SN_dhSinglePass_cofactorDH_sha256kdf_scheme* = "dhSinglePass-cofactorDH-sha256kdf-scheme"
+  NID_dhSinglePass_cofactorDH_sha256kdf_scheme* = 943
+  SN_dhSinglePass_cofactorDH_sha384kdf_scheme* = "dhSinglePass-cofactorDH-sha384kdf-scheme"
+  NID_dhSinglePass_cofactorDH_sha384kdf_scheme* = 944
+  SN_dhSinglePass_cofactorDH_sha512kdf_scheme* = "dhSinglePass-cofactorDH-sha512kdf-scheme"
+  NID_dhSinglePass_cofactorDH_sha512kdf_scheme* = 945
+  SN_dh_std_kdf* = "dh-std-kdf"
+  NID_dh_std_kdf* = 946
+  SN_dh_cofactor_kdf* = "dh-cofactor-kdf"
+  NID_dh_cofactor_kdf* = 947
+  SN_ct_precert_scts* = "ct_precert_scts"
+  LN_ct_precert_scts* = "CT Precertificate SCTs"
+  NID_ct_precert_scts* = 951
+  SN_ct_precert_poison* = "ct_precert_poison"
+  LN_ct_precert_poison* = "CT Precertificate Poison"
+  NID_ct_precert_poison* = 952
+  SN_ct_precert_signer* = "ct_precert_signer"
+  LN_ct_precert_signer* = "CT Precertificate Signer"
+  NID_ct_precert_signer* = 953
+  SN_ct_cert_scts* = "ct_cert_scts"
+  LN_ct_cert_scts* = "CT Certificate SCTs"
+  NID_ct_cert_scts* = 954
+  SN_jurisdictionLocalityName* = "jurisdictionL"
+  LN_jurisdictionLocalityName* = "jurisdictionLocalityName"
+  NID_jurisdictionLocalityName* = 955
+  SN_jurisdictionStateOrProvinceName* = "jurisdictionST"
+  LN_jurisdictionStateOrProvinceName* = "jurisdictionStateOrProvinceName"
+  NID_jurisdictionStateOrProvinceName* = 956
+  SN_jurisdictionCountryName* = "jurisdictionC"
+  LN_jurisdictionCountryName* = "jurisdictionCountryName"
+  NID_jurisdictionCountryName* = 957
+  SN_id_scrypt* = "id-scrypt"
+  LN_id_scrypt* = "scrypt"
+  NID_id_scrypt* = 973
+  SN_tls1_prf* = "TLS1-PRF"
+  LN_tls1_prf* = "tls1-prf"
+  NID_tls1_prf* = 1021
+  SN_hkdf* = "HKDF"
+  LN_hkdf* = "hkdf"
+  NID_hkdf* = 1036
+  SN_sshkdf* = "SSHKDF"
+  LN_sshkdf* = "sshkdf"
+  NID_sshkdf* = 1203
+  SN_sskdf* = "SSKDF"
+  LN_sskdf* = "sskdf"
+  NID_sskdf* = 1205
+  SN_x942kdf* = "X942KDF"
+  LN_x942kdf* = "x942kdf"
+  NID_x942kdf* = 1207
+  SN_x963kdf* = "X963KDF"
+  LN_x963kdf* = "x963kdf"
+  NID_x963kdf* = 1206
+  SN_id_pkinit* = "id-pkinit"
+  NID_id_pkinit* = 1031
+  SN_pkInitClientAuth* = "pkInitClientAuth"
+  LN_pkInitClientAuth* = "PKINIT Client Auth"
+  NID_pkInitClientAuth* = 1032
+  SN_pkInitKDC* = "pkInitKDC"
+  LN_pkInitKDC* = "Signing KDC Response"
+  NID_pkInitKDC* = 1033
+  SN_X25519* = "X25519"
+  NID_X25519* = 1034
+  SN_X448* = "X448"
+  NID_X448* = 1035
+  SN_ED25519* = "ED25519"
+  NID_ED25519* = 1087
+  SN_ED448* = "ED448"
+  NID_ED448* = 1088
+  SN_kx_rsa* = "KxRSA"
+  LN_kx_rsa* = "kx-rsa"
+  NID_kx_rsa* = 1037
+  SN_kx_ecdhe* = "KxECDHE"
+  LN_kx_ecdhe* = "kx-ecdhe"
+  NID_kx_ecdhe* = 1038
+  SN_kx_dhe* = "KxDHE"
+  LN_kx_dhe* = "kx-dhe"
+  NID_kx_dhe* = 1039
+  SN_kx_ecdhe_psk* = "KxECDHE-PSK"
+  LN_kx_ecdhe_psk* = "kx-ecdhe-psk"
+  NID_kx_ecdhe_psk* = 1040
+  SN_kx_dhe_psk* = "KxDHE-PSK"
+  LN_kx_dhe_psk* = "kx-dhe-psk"
+  NID_kx_dhe_psk* = 1041
+  SN_kx_rsa_psk* = "KxRSA_PSK"
+  LN_kx_rsa_psk* = "kx-rsa-psk"
+  NID_kx_rsa_psk* = 1042
+  SN_kx_psk* = "KxPSK"
+  LN_kx_psk* = "kx-psk"
+  NID_kx_psk* = 1043
+  SN_kx_srp* = "KxSRP"
+  LN_kx_srp* = "kx-srp"
+  NID_kx_srp* = 1044
+  SN_kx_gost* = "KxGOST"
+  LN_kx_gost* = "kx-gost"
+  NID_kx_gost* = 1045
+  SN_kx_gost18* = "KxGOST18"
+  LN_kx_gost18* = "kx-gost18"
+  NID_kx_gost18* = 1218
+  SN_kx_any* = "KxANY"
+  LN_kx_any* = "kx-any"
+  NID_kx_any* = 1063
+  SN_auth_rsa* = "AuthRSA"
+  LN_auth_rsa* = "auth-rsa"
+  NID_auth_rsa* = 1046
+  SN_auth_ecdsa* = "AuthECDSA"
+  LN_auth_ecdsa* = "auth-ecdsa"
+  NID_auth_ecdsa* = 1047
+  SN_auth_psk* = "AuthPSK"
+  LN_auth_psk* = "auth-psk"
+  NID_auth_psk* = 1048
+  SN_auth_dss* = "AuthDSS"
+  LN_auth_dss* = "auth-dss"
+  NID_auth_dss* = 1049
+  SN_auth_gost01* = "AuthGOST01"
+  LN_auth_gost01* = "auth-gost01"
+  NID_auth_gost01* = 1050
+  SN_auth_gost12* = "AuthGOST12"
+  LN_auth_gost12* = "auth-gost12"
+  NID_auth_gost12* = 1051
+  SN_auth_srp* = "AuthSRP"
+  LN_auth_srp* = "auth-srp"
+  NID_auth_srp* = 1052
+  SN_auth_null* = "AuthNULL"
+  LN_auth_null* = "auth-null"
+  NID_auth_null* = 1053
+  SN_auth_any* = "AuthANY"
+  LN_auth_any* = "auth-any"
+  NID_auth_any* = 1064
+  SN_poly1305* = "Poly1305"
+  LN_poly1305* = "poly1305"
+  NID_poly1305* = 1061
+  SN_siphash* = "SipHash"
+  LN_siphash* = "siphash"
+  NID_siphash* = 1062
+  SN_ffdhe2048* = "ffdhe2048"
+  NID_ffdhe2048* = 1126
+  SN_ffdhe3072* = "ffdhe3072"
+  NID_ffdhe3072* = 1127
+  SN_ffdhe4096* = "ffdhe4096"
+  NID_ffdhe4096* = 1128
+  SN_ffdhe6144* = "ffdhe6144"
+  NID_ffdhe6144* = 1129
+  SN_ffdhe8192* = "ffdhe8192"
+  NID_ffdhe8192* = 1130
+  SN_modp_1536* = "modp_1536"
+  NID_modp_1536* = 1212
+  SN_modp_2048* = "modp_2048"
+  NID_modp_2048* = 1213
+  SN_modp_3072* = "modp_3072"
+  NID_modp_3072* = 1214
+  SN_modp_4096* = "modp_4096"
+  NID_modp_4096* = 1215
+  SN_modp_6144* = "modp_6144"
+  NID_modp_6144* = 1216
+  SN_modp_8192* = "modp_8192"
+  NID_modp_8192* = 1217
+  SN_ISO_UA* = "ISO-UA"
+  NID_ISO_UA* = 1150
+  SN_ua_pki* = "ua-pki"
+  NID_ua_pki* = 1151
+  SN_dstu28147* = "dstu28147"
+  LN_dstu28147* = "DSTU Gost 28147-2009"
+  NID_dstu28147* = 1152
+  SN_dstu28147_ofb* = "dstu28147-ofb"
+  LN_dstu28147_ofb* = "DSTU Gost 28147-2009 OFB mode"
+  NID_dstu28147_ofb* = 1153
+  SN_dstu28147_cfb* = "dstu28147-cfb"
+  LN_dstu28147_cfb* = "DSTU Gost 28147-2009 CFB mode"
+  NID_dstu28147_cfb* = 1154
+  SN_dstu28147_wrap* = "dstu28147-wrap"
+  LN_dstu28147_wrap* = "DSTU Gost 28147-2009 key wrap"
+  NID_dstu28147_wrap* = 1155
+  SN_hmacWithDstu34311* = "hmacWithDstu34311"
+  LN_hmacWithDstu34311* = "HMAC DSTU Gost 34311-95"
+  NID_hmacWithDstu34311* = 1156
+  SN_dstu34311* = "dstu34311"
+  LN_dstu34311* = "DSTU Gost 34311-95"
+  NID_dstu34311* = 1157
+  SN_dstu4145le* = "dstu4145le"
+  LN_dstu4145le* = "DSTU 4145-2002 little endian"
+  NID_dstu4145le* = 1158
+  SN_dstu4145be* = "dstu4145be"
+  LN_dstu4145be* = "DSTU 4145-2002 big endian"
+  NID_dstu4145be* = 1159
+  SN_uacurve0* = "uacurve0"
+  LN_uacurve0* = "DSTU curve 0"
+  NID_uacurve0* = 1160
+  SN_uacurve1* = "uacurve1"
+  LN_uacurve1* = "DSTU curve 1"
+  NID_uacurve1* = 1161
+  SN_uacurve2* = "uacurve2"
+  LN_uacurve2* = "DSTU curve 2"
+  NID_uacurve2* = 1162
+  SN_uacurve3* = "uacurve3"
+  LN_uacurve3* = "DSTU curve 3"
+  NID_uacurve3* = 1163
+  SN_uacurve4* = "uacurve4"
+  LN_uacurve4* = "DSTU curve 4"
+  NID_uacurve4* = 1164
+  SN_uacurve5* = "uacurve5"
+  LN_uacurve5* = "DSTU curve 5"
+  NID_uacurve5* = 1165
+  SN_uacurve6* = "uacurve6"
+  LN_uacurve6* = "DSTU curve 6"
+  NID_uacurve6* = 1166
+  SN_uacurve7* = "uacurve7"
+  LN_uacurve7* = "DSTU curve 7"
+  NID_uacurve7* = 1167
+  SN_uacurve8* = "uacurve8"
+  LN_uacurve8* = "DSTU curve 8"
+  NID_uacurve8* = 1168
+  SN_uacurve9* = "uacurve9"
+  LN_uacurve9* = "DSTU curve 9"
+  NID_uacurve9* = 1169
+  SN_aes_128_siv* = "AES-128-SIV"
+  LN_aes_128_siv* = "aes-128-siv"
+  NID_aes_128_siv* = 1198
+  SN_aes_192_siv* = "AES-192-SIV"
+  LN_aes_192_siv* = "aes-192-siv"
+  NID_aes_192_siv* = 1199
+  SN_aes_256_siv* = "AES-256-SIV"
+  LN_aes_256_siv* = "aes-256-siv"
+  NID_aes_256_siv* = 1200
+  SN_oracle* = "oracle-organization"
+  LN_oracle* = "Oracle organization"
+  NID_oracle* = 1282
+  SN_oracle_jdk_trustedkeyusage* = "oracle-jdk-trustedkeyusage"
+  LN_oracle_jdk_trustedkeyusage* = "Trusted key usage (Oracle)"
+  NID_oracle_jdk_trustedkeyusage* = 1283
+  SN_brotli* = "brotli"
+  LN_brotli* = "Brotli compression"
+  NID_brotli* = 1288
+  SN_zstd* = "zstd"
+  LN_zstd* = "Zstandard compression"
+  NID_zstd* = 1289
diff --git a/lib/wrappers/openssl/pem.nim b/lib/wrappers/openssl/pem.nim
new file mode 100644
index 00000000000..777458f1199
--- /dev/null
+++ b/lib/wrappers/openssl/pem.nim
@@ -0,0 +1,7 @@
+import types
+
+export pem_password_cb
+
+when defined(nimOpenssl111):
+  proc PEM_read_bio_RSA_PUBKEY*(bp: ptr BIO, x: ptr ptr RSA, cb: pem_password_cb, u: pointer): ptr RSA {.importc, cdecl.}
+  proc PEM_read_bio_RSAPrivateKey*(bp: ptr BIO, x: ptr ptr RSA, cb: pem_password_cb, u: pointer): ptr RSA {.importc, cdecl.}
diff --git a/lib/wrappers/openssl/rsa.nim b/lib/wrappers/openssl/rsa.nim
new file mode 100644
index 00000000000..48dfdec5b38
--- /dev/null
+++ b/lib/wrappers/openssl/rsa.nim
@@ -0,0 +1,16 @@
+import types
+
+const
+  RSA_PKCS1_PADDING* = 1
+  RSA_NO_PADDING* = 3
+  RSA_PKCS1_OAEP_PADDING* = 4
+  RSA_X931_PADDING* = 5
+  RSA_PKCS1_PSS_PADDING* = 6
+  RSA_PKCS1_WITH_TLS_PADDING* = 7
+
+proc EVP_PKEY_CTX_set_rsa_padding*(ctx: ptr EVP_PKEY_CTX, pad: cint): cint {.importc, cdecl.}
+proc EVP_PKEY_CTX_get_rsa_padding*(ctx: ptr EVP_PKEY_CTX, pad: ptr cint): cint {.importc, cdecl.}
+
+when defined(nimOpenssl111):
+  proc RSA_new*(): ptr RSA {.importc, cdecl.}
+  proc RSA_free*(rsa: ptr RSA) {.importc, cdecl.}
diff --git a/lib/wrappers/openssl/safestack.nim b/lib/wrappers/openssl/safestack.nim
new file mode 100644
index 00000000000..d2674811b20
--- /dev/null
+++ b/lib/wrappers/openssl/safestack.nim
@@ -0,0 +1,64 @@
+import libcrypto
+
+import stack
+
+when defined(nimHasStyleChecks):
+  {.push styleChecks: off.}
+
+type
+  STACK_OF*[T] = distinct OPENSSL_STACK
+  compfunc*[T] = proc (a: ptr T, b: ptr T): cint {.cdecl.}
+  copyfunc*[T] = proc (a: ptr T): ptr T {.cdecl.}
+  freefunc*[T] = proc (a: ptr T) {.cdecl.}
+
+proc new*[T](compare: compfunc[T]): ptr STACK_OF[T] {.inline.} =
+  (ptr STACK_OF[T]): OPENSSL_sk_new(cast[OPENSSL_sk_compfunc](compare))
+proc new_null*(T: typedesc): ptr STACK_OF[T] {.inline.} =
+  (ptr STACK_OF[T]): OPENSSL_sk_new_null()
+proc new_reserve*[T](c: compfunc[T], n: cint): ptr STACK_OF[T] {.inline.} =
+  (ptr STACK_OF[T]): OPENSSL_sk_new_reserve(cast[OPENSSL_sk_compfunc](c), n)
+proc free*[T](sk: ptr STACK_OF[T]) {.inline.} =
+  OPENSSL_sk_free((ptr OPENSSL_STACK) sk)
+proc pop_free*[T](sk: ptr STACK_OF[T], fn: freefunc[T]) {.inline.} =
+  OPENSSL_sk_pop_free((ptr OPENSSL_STACK) sk, cast[OPENSSL_sk_freefunc](fn))
+proc deep_copy*[T](sk: ptr STACK_OF[T], copyfunc: copyfunc[T], freefunc: freefunc[T]): ptr STACK_OF[T] {.inline.} =
+  (ptr STACK_OF[T]): OPENSSL_sk_deep_copy((ptr OPENSSL_STACK) sk, cast[OPENSSL_sk_copyfunc](copyfunc), cast[OPENSSL_sk_freefunc](freefunc))
+proc dup*[T](sk: ptr STACK_OF[T]): ptr STACK_OF[T] {.inline.} =
+  (ptr STACK_OF[T]): OPENSSL_sk_deep_copy((ptr OPENSSL_STACK) sk)
+
+proc delete*[T](sk: ptr STACK_OF[T], i: cint): ptr T {.inline.} =
+  cast[ptr T](OPENSSL_sk_delete((ptr OPENSSL_STACK) sk, i))
+proc delete_ptr*[T](sk: ptr STACK_OF[T], p: ptr T): ptr T {.inline.} =
+  cast[ptr T](OPENSSL_sk_delete_ptr((ptr OPENSSL_STACK) sk, p))
+proc find*[T](sk: ptr STACK_OF[T], data: ptr T): cint {.inline.} =
+  OPENSSL_sk_find((ptr OPENSSL_STACK) sk, data)
+proc find_all*[T](sk: ptr STACK_OF[T], data: ptr T, pnum: ptr cint): cint {.inline.} =
+  OPENSSL_sk_find_all((ptr OPENSSL_STACK) sk, data, pnum)
+proc find_ex*[T](sk: ptr STACK_OF[T], data: ptr T): cint {.inline.} =
+  OPENSSL_sk_find_ex((ptr OPENSSL_STACK) sk, data)
+proc insert*[T](sk: ptr STACK_OF[T], data: ptr T, idx: cint): cint {.inline.} =
+  OPENSSL_sk_insert((ptr OPENSSL_STACK) sk, data, idx)
+proc is_sorted*[T](sk: ptr STACK_OF[T]): cint {.inline.} =
+  OPENSSL_sk_is_sorted((ptr OPENSSL_STACK) sk)
+proc num*[T](sk: ptr STACK_OF[T]): cint {.inline.} =
+  OPENSSL_sk_num((ptr OPENSSL_STACK) sk)
+proc pop*[T](sk: ptr STACK_OF[T]): ptr T {.inline.} =
+  cast[ptr T](OPENSSL_sk_pop((ptr OPENSSL_STACK) sk))
+proc push*[T](sk: ptr STACK_OF[T], data: ptr T): cint {.inline.} =
+  OPENSSL_sk_push((ptr OPENSSL_STACK) sk, ptr)
+proc reserve*[T](sk: ptr STACK_OF[T], n: cint): cint {.inline.} =
+  OPENSSL_sk_reserve((ptr OPENSSL_STACK) sk, n)
+proc set*[T](sk: ptr STACK_OF[T], idx: cint, data: ptr T): ptr T {.inline.} =
+  cast[ptr T](OPENSSL_sk_set((ptr OPENSSL_STACK) sk, idx, data))
+proc set_cmp_func*[T](sk: ptr STACK_OF[T], cmp: compfunc[T]): compfunc[T] {.inline.} =
+  cast[compfunc[T]](OPENSSL_sk_set_cmp_func((ptr OPENSSL_STACK) sk, cast[OPENSSL_sk_compfunc](cmp)))
+proc shift*[T](sk: ptr STACK_OF[T]): ptr T {.inline.} =
+  cast[ptr T](OPENSSL_sk_shift((ptr OPENSSL_STACK) sk))
+proc sort*[T](sk: ptr STACK_OF[T]) {.inline.} =
+  OPENSSL_sk_sort((ptr OPENSSL_STACK) sk)
+proc unshift*[T](sk: ptr STACK_OF[T], data: ptr T): cint {.inline.} =
+  OPENSSL_sk_unshift((ptr OPENSSL_STACK) sk, data)
+proc value*[T](sk: ptr STACK_OF[T], i: cint): ptr T {.inline.} =
+  cast[ptr T](OPENSSL_sk_value((ptr OPENSSL_STACK) sk, i))
+proc zero*[T](sk: ptr STACK_OF[T]) {.inline.} =
+  OPENSSL_sk_zero((ptr OPENSSL_STACK) sk)
diff --git a/lib/wrappers/openssl/ssl.nim b/lib/wrappers/openssl/ssl.nim
new file mode 100644
index 00000000000..0851d7fc58c
--- /dev/null
+++ b/lib/wrappers/openssl/ssl.nim
@@ -0,0 +1,237 @@
+import libssl
+
+import safestack
+import x509
+
+import types
+export SSL, SSL_CTX
+
+type
+  SSL_METHOD* {.pure.} = object
+  SSL_SESSION* {.pure.} = object
+  SSL_psk_client_cb_func* = proc (ssl: ptr SSL, hint: cstring, identity: cstring, max_identity_len: cuint, psk: ptr UncheckedArray[cuchar], max_psk_len: cuint): cuint {.cdecl.}
+  SSL_psk_server_cb_func* = proc (ssl: ptr SSL, identity: cstring, psk: ptr UncheckedArray[cuchar], max_psk_len: cuint): cuint {.cdecl.}
+  SSL_psk_use_session_cb_func* = proc (ssl: ptr SSL, md: ptr EVP_MD, id: ptr cstring, idlen: ptr csize_t, sess: ptr ptr SSL_SESSION) {.cdecl.}
+  SSL_psk_find_session_cb_func* = proc (ssl: ptr SSL, identity: cstring, identity_len: csize_t, sess: ptr ptr SSL_SESSION) {.cdecl.}
+  SSL_verify_cb* = proc (preverify_ok: cint, x509_ctx: ptr X509_STORE_CTX): cint {.cdecl.}
+
+const
+  SSL_CTRL_GET_CLIENT_CERT_REQUEST* = 9
+  SSL_CTRL_GET_NUM_RENEGOTIATIONS* = 10
+  SSL_CTRL_CLEAR_NUM_RENEGOTIATIONS* = 11
+  SSL_CTRL_GET_TOTAL_RENEGOTIATIONS* = 12
+  SSL_CTRL_GET_FLAGS* = 13
+  SSL_CTRL_EXTRA_CHAIN_CERT* = 14
+  SSL_CTRL_SET_MSG_CALLBACK* = 15
+  SSL_CTRL_SET_MSG_CALLBACK_ARG* = 16
+  SSL_CTRL_SET_MTU* = 17
+  SSL_CTRL_SESS_NUMBER* = 20
+  SSL_CTRL_SESS_CONNECT* = 21
+  SSL_CTRL_SESS_CONNECT_GOOD* = 22
+  SSL_CTRL_SESS_CONNECT_RENEGOTIATE* = 23
+  SSL_CTRL_SESS_ACCEPT* = 24
+  SSL_CTRL_SESS_ACCEPT_GOOD* = 25
+  SSL_CTRL_SESS_ACCEPT_RENEGOTIATE* = 26
+  SSL_CTRL_SESS_HIT* = 27
+  SSL_CTRL_SESS_CB_HIT* = 28
+  SSL_CTRL_SESS_MISSES* = 29
+  SSL_CTRL_SESS_TIMEOUTS* = 30
+  SSL_CTRL_SESS_CACHE_FULL* = 31
+  SSL_CTRL_MODE* = 33
+  SSL_CTRL_GET_READ_AHEAD* = 40
+  SSL_CTRL_SET_READ_AHEAD* = 41
+  SSL_CTRL_SET_SESS_CACHE_SIZE* = 42
+  SSL_CTRL_GET_SESS_CACHE_SIZE* = 43
+  SSL_CTRL_SET_SESS_CACHE_MODE* = 44
+  SSL_CTRL_GET_SESS_CACHE_MODE* = 45
+  SSL_CTRL_GET_MAX_CERT_LIST* = 50
+  SSL_CTRL_SET_MAX_CERT_LIST* = 51
+  SSL_CTRL_SET_MAX_SEND_FRAGMENT* = 52
+  SSL_CTRL_SET_TLSEXT_SERVERNAME_CB* = 53
+  SSL_CTRL_SET_TLSEXT_SERVERNAME_ARG* = 54
+  SSL_CTRL_SET_TLSEXT_HOSTNAME* = 55
+  SSL_CTRL_SET_TLSEXT_DEBUG_CB* = 56
+  SSL_CTRL_SET_TLSEXT_DEBUG_ARG* = 57
+  SSL_CTRL_GET_TLSEXT_TICKET_KEYS* = 58
+  SSL_CTRL_SET_TLSEXT_TICKET_KEYS* = 59
+  SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB* = 63
+  SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB_ARG* = 64
+  SSL_CTRL_SET_TLSEXT_STATUS_REQ_TYPE* = 65
+  SSL_CTRL_GET_TLSEXT_STATUS_REQ_EXTS* = 66
+  SSL_CTRL_SET_TLSEXT_STATUS_REQ_EXTS* = 67
+  SSL_CTRL_GET_TLSEXT_STATUS_REQ_IDS* = 68
+  SSL_CTRL_SET_TLSEXT_STATUS_REQ_IDS* = 69
+  SSL_CTRL_GET_TLSEXT_STATUS_REQ_OCSP_RESP* = 70
+  SSL_CTRL_SET_TLSEXT_STATUS_REQ_OCSP_RESP* = 71
+  SSL_CTRL_SET_TLS_EXT_SRP_USERNAME_CB* = 75
+  SSL_CTRL_SET_SRP_VERIFY_PARAM_CB* = 76
+  SSL_CTRL_SET_SRP_GIVE_CLIENT_PWD_CB* = 77
+  SSL_CTRL_SET_SRP_ARG* = 78
+  SSL_CTRL_SET_TLS_EXT_SRP_USERNAME* = 79
+  SSL_CTRL_SET_TLS_EXT_SRP_STRENGTH* = 80
+  SSL_CTRL_SET_TLS_EXT_SRP_PASSWORD* = 81
+  DTLS_CTRL_GET_TIMEOUT* = 73
+  DTLS_CTRL_HANDLE_TIMEOUT* = 74
+  SSL_CTRL_GET_RI_SUPPORT* = 76
+  SSL_CTRL_CLEAR_MODE* = 78
+  SSL_CTRL_SET_NOT_RESUMABLE_SESS_CB* = 79
+  SSL_CTRL_GET_EXTRA_CHAIN_CERTS* = 82
+  SSL_CTRL_CLEAR_EXTRA_CHAIN_CERTS* = 83
+  SSL_CTRL_CHAIN* = 88
+  SSL_CTRL_CHAIN_CERT* = 89
+  SSL_CTRL_GET_GROUPS* = 90
+  SSL_CTRL_SET_GROUPS* = 91
+  SSL_CTRL_SET_GROUPS_LIST* = 92
+  SSL_CTRL_GET_SHARED_GROUP* = 93
+  SSL_CTRL_SET_SIGALGS* = 97
+  SSL_CTRL_SET_SIGALGS_LIST* = 98
+  SSL_CTRL_CERT_FLAGS* = 99
+  SSL_CTRL_CLEAR_CERT_FLAGS* = 100
+  SSL_CTRL_SET_CLIENT_SIGALGS* = 101
+  SSL_CTRL_SET_CLIENT_SIGALGS_LIST* = 102
+  SSL_CTRL_GET_CLIENT_CERT_TYPES* = 103
+  SSL_CTRL_SET_CLIENT_CERT_TYPES* = 104
+  SSL_CTRL_BUILD_CERT_CHAIN* = 105
+  SSL_CTRL_SET_VERIFY_CERT_STORE* = 106
+  SSL_CTRL_SET_CHAIN_CERT_STORE* = 107
+  SSL_CTRL_GET_PEER_SIGNATURE_NID* = 108
+  SSL_CTRL_GET_PEER_TMP_KEY* = 109
+  SSL_CTRL_GET_RAW_CIPHERLIST* = 110
+  SSL_CTRL_GET_EC_POINT_FORMATS* = 111
+  SSL_CTRL_GET_CHAIN_CERTS* = 115
+  SSL_CTRL_SELECT_CURRENT_CERT* = 116
+  SSL_CTRL_SET_CURRENT_CERT* = 117
+  SSL_CTRL_SET_DH_AUTO* = 118
+  DTLS_CTRL_SET_LINK_MTU* = 120
+  DTLS_CTRL_GET_LINK_MIN_MTU* = 121
+  SSL_CTRL_GET_EXTMS_SUPPORT* = 122
+  SSL_CTRL_SET_MIN_PROTO_VERSION* = 123
+  SSL_CTRL_SET_MAX_PROTO_VERSION* = 124
+  SSL_CTRL_SET_SPLIT_SEND_FRAGMENT* = 125
+  SSL_CTRL_SET_MAX_PIPELINES* = 126
+  SSL_CTRL_GET_TLSEXT_STATUS_REQ_TYPE* = 127
+  SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB* = 128
+  SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB_ARG* = 129
+  SSL_CTRL_GET_MIN_PROTO_VERSION* = 130
+  SSL_CTRL_GET_MAX_PROTO_VERSION* = 131
+  SSL_CTRL_GET_SIGNATURE_NID* = 132
+  SSL_CTRL_GET_TMP_KEY* = 133
+  SSL_CTRL_GET_NEGOTIATED_GROUP* = 134
+
+  SSL_ERROR_NONE* = 0
+  SSL_ERROR_SSL* = 1
+  SSL_ERROR_WANT_READ* = 2
+  SSL_ERROR_WANT_WRITE* = 3
+  SSL_ERROR_WANT_X509_LOOKUP* = 4
+  SSL_ERROR_SYSCALL* = 5
+  SSL_ERROR_ZERO_RETURN* = 6
+  SSL_ERROR_WANT_CONNECT* = 7
+  SSL_ERROR_WANT_ACCEPT* = 8
+  SSL_ERROR_WANT_ASYNC* = 9
+  SSL_ERROR_WANT_ASYNC_JOB* = 10
+  SSL_ERROR_WANT_CLIENT_HELLO_CB* = 11
+  SSL_ERROR_WANT_RETRY_VERIFY* = 12
+
+  SSL_FILETYPE_ASN1* = X509_FILETYPE_ASN1
+  SSL_FILETYPE_PEM* = X509_FILETYPE_PEM
+
+  SSL_MAX_SSL_SESSION_ID_LENGTH* = 32
+  SSL_MAX_SID_CTX_LENGTH* = 32
+
+  SSL_VERIFY_NONE* = 0x00
+  SSL_VERIFY_PEER* = 0x01
+  SSL_VERIFY_FAIL_IF_NO_PEER_CERT* = 0x02
+  SSL_VERIFY_CLIENT_ONCE* = 0x04
+  SSL_VERIFY_POST_HANDSHAKE* = 0x08
+
+  SSL3_VERSION* = 0x0300
+  TLS1_VERSION* = 0x0301
+  TLS1_1_VERSION* = 0x0302
+  TLS1_2_VERSION* = 0x0303
+  TLS1_3_VERSION* = 0x0304
+
+  TLSEXT_NAMETYPE_host_name* = 0
+
+proc SSL_CTX_new*(`method`: ptr SSL_METHOD): ptr SSL_CTX {.importc, cdecl.}
+proc SSL_CTX_up_ref*(ctx: ptr SSL_CTX): cint {.importc, cdecl.}
+proc SSL_CTX_free*(ctx: ptr SSL_CTX) {.importc, cdecl.}
+
+proc SSL_CTX_ctrl*(ctx: ptr SSL_CTX, cmd: cint, large: clong, parg: pointer): clong {.importc, cdecl.}
+proc SSL_CTX_set_min_proto_version*(ctx: ptr SSL_CTX, version: cint): cint {.inline.} =
+  cint: SSL_CTX_ctrl(ctx, SSL_CTRL_SET_MIN_PROTO_VERSION, clong(version), nil)
+
+proc SSL_CTX_set_cipher_list*(ctx: ptr SSL_CTX, str: cstring): cint {.importc, cdecl.}
+proc SSL_CTX_set_ciphersuites*(ctx: ptr SSL_CTX, str: cstring): cint {.importc, cdecl.}
+proc SSL_CTX_set_default_verify_dir*(ctx: ptr SSL_CTX, CApath: cstring): cint {.importc, cdecl.}
+proc SSL_CTX_set_default_verify_file*(ctx: ptr SSL_CTX, CAfile: cstring): cint {.importc, cdecl.}
+proc SSL_CTX_set_default_verify_paths*(ctx: ptr SSL_CTX, CAfile: cstring): cint {.importc, cdecl.}
+proc SSL_CTX_set_default_verify_store*(ctx: ptr SSL_CTX, CAstore: cstring): cint {.importc, cdecl.}
+proc SSL_CTX_set_ex_data*(ctx: ptr SSL_CTX, idx: cint, data: pointer): cint {.importc, cdecl.}
+proc SSL_CTX_set_psk_client_callback*(ctx: ptr SSL_CTX, cb: SSL_psk_client_cb_func) {.importc, cdecl.}
+proc SSL_CTX_set_psk_find_session_callback*(ctx: ptr SSL_CTX, cb: SSL_psk_find_session_cb_func) {.importc, cdecl.}
+proc SSL_CTX_set_psk_server_callback*(ctx: ptr SSL_CTX, cb: SSL_psk_server_cb_func) {.importc, cdecl.}
+proc SSL_CTX_set_psk_use_session_callback*(ctx: ptr SSL_CTX, cb: SSL_psk_use_session_cb_func) {.importc, cdecl.}
+proc SSL_CTX_set_session_id_context*(ctx: ptr SSL_CTX, sid_ctx: ptr UncheckedArray[cuchar], sid_ctx_len: cuint): cint {.importc, cdecl.}
+proc SSL_CTX_set_verify*(ctx: ptr SSL_CTX, mode: cint, verify_callback: SSL_verify_cb) {.importc, cdecl.}
+
+proc SSL_CTX_get_ex_data*(ssl: ptr SSL_CTX, idx: cint): pointer {.importc, cdecl.}
+
+proc SSL_CTX_load_verify_file*(ctx: ptr SSL_CTX, CAfile: cstring): cint {.importc, cdecl.}
+proc SSL_CTX_load_verify_dir*(ctx: ptr SSL_CTX, CApath: cstring): cint {.importc, cdecl.}
+proc SSL_CTX_load_verify_store*(ctx: ptr SSL_CTX, CAstore: cstring): cint {.importc, cdecl.}
+proc SSL_CTX_load_verify_locations*(ctx: ptr SSL_CTX, CAfile: cstring, CApath: cstring): cint {.importc, cdecl.}
+
+proc SSL_CTX_use_PrivateKey_file*(ctx: ptr SSL_CTX, file: cstring, typ: cint): cint {.importc, cdecl.}
+proc SSL_CTX_use_certificate_chain_file*(ctx: ptr SSL_CTX, file: cstring): cint {.importc, cdecl.}
+proc SSL_CTX_use_psk_identity_hint*(ctx: ptr SSL_CTX, hint: cstring): cint {.importc, cdecl.}
+proc SSL_CTX_check_private_key*(ctx: ptr SSL_CTX): cint {.importc, cdecl.}
+
+proc TLS_method*(): ptr SSL_METHOD {.importc, cdecl.}
+proc TLS_server_method*(): ptr SSL_METHOD {.importc, cdecl.}
+proc TLS_client_method*(): ptr SSL_METHOD {.importc, cdecl.}
+
+proc SSL_new*(ctx: ptr SSL_CTX): ptr SSL {.importc, cdecl.}
+proc SSL_up_ref*(ssl: ptr SSL): cint {.importc, cdecl.}
+proc SSL_free*(ssl: ptr SSL) {.importc, cdecl.}
+
+proc SSL_add1_host*(ssl: ptr SSL, hostname: cstring): cint {.importc, cdecl.}
+
+proc SSL_in_init*(ssl: ptr SSL): cint {.importc, cdecl.}
+proc SSL_in_before*(ssl: ptr SSL): cint {.importc, cdecl.}
+proc SSL_is_init_finished*(ssl: ptr SSL): cint {.importc, cdecl.}
+
+proc SSL_ctrl*(ssl: ptr SSL, cmd: cint, large: clong, parg: pointer): clong {.importc, cdecl.}
+proc SSL_set_tlsext_host_name*(ssl: ptr SSL, name: cstring): cint {.inline.} =
+  cint: SSL_ctrl(ssl, SSL_CTRL_SET_TLSEXT_HOSTNAME, TLSEXT_NAMETYPE_host_name, name)
+
+proc SSL_set_bio*(ssl: ptr SSL, rbio: ptr BIO, wbio: ptr BIO) {.importc, cdecl.}
+proc SSL_set_fd*(ssl: ptr SSL, fd: cint): cint {.importc, cdecl.}
+proc SSL_set_rfd*(ssl: ptr SSL, fd: cint): cint {.importc, cdecl.}
+proc SSL_set_verify*(ctx: ptr SSL, mode: cint, verify_callback: SSL_verify_cb) {.importc, cdecl.}
+proc SSL_set_wfd*(ssl: ptr SSL, fd: cint): cint {.importc, cdecl.}
+
+proc SSL_set1_host*(ssl: ptr SSL, hostname: cstring): cint {.importc, cdecl.}
+
+proc SSL_get_SSL_CTX*(ssl: ptr SSL): ptr SSL_CTX {.importc, cdecl.}
+proc SSL_get_error*(ssl: ptr SSL, ret: cint): cint {.importc, cdecl.}
+proc SSL_get_peer_cert_chain*(ssl: ptr SSL): ptr STACK_OF[X509] {.importc, cdecl.}
+proc SSL_get_psk_identity*(ssl: ptr SSL): cstring {.importc, cdecl.}
+proc SSL_get_psk_identity_hint*(ssl: ptr SSL): cstring {.importc, cdecl.}
+proc SSL_get_verify_result*(ssl: ptr SSL): clong {.importc, cdecl.}
+
+proc SSL_get0_verified_chain*(ssl: ptr SSL): ptr STACK_OF[X509] {.importc, cdecl.}
+
+when not defined(nimOpenssl111):
+  proc SSL_get0_peer_certificate*(ssl: ptr SSL): ptr X509 {.importc, cdecl.}
+  proc SSL_get1_peer_certificate*(ssl: ptr SSL): ptr X509 {.importc, cdecl.}
+else:
+  proc SSL_get_peer_certificate*(ssl: ptr SSL): ptr X509 {.importc, cdecl.}
+
+proc SSL_accept*(ssl: ptr SSL): cint {.importc, cdecl.}
+proc SSL_connect*(ssl: ptr SSL): cint {.importc, cdecl.}
+proc SSL_read*(ssl: ptr SSL, buf: pointer, num: cint): cint {.importc, cdecl.}
+proc SSL_read_ex*(ssl: ptr SSL, buf: pointer, num: csize_t, readbytes: ptr csize_t): cint {.importc, cdecl.}
+proc SSL_shutdown*(ssl: ptr SSL): cint {.importc, cdecl.}
+proc SSL_write*(ssl: ptr SSL, buf: pointer, num: cint): cint {.importc, cdecl.}
+proc SSL_write_ex*(ssl: ptr SSL, buf: pointer, num: csize_t, written: ptr csize_t): cint {.importc, cdecl.}
+proc SSL_pending*(ssl: ptr SSL): cint {.importc, cdecl.}
diff --git a/lib/wrappers/openssl/stack.nim b/lib/wrappers/openssl/stack.nim
new file mode 100644
index 00000000000..ede4e83b32e
--- /dev/null
+++ b/lib/wrappers/openssl/stack.nim
@@ -0,0 +1,34 @@
+import libcrypto
+
+type
+  OPENSSL_STACK* {.pure.} = object
+  OPENSSL_sk_compfunc* = proc (a: pointer, b: pointer): cint {.cdecl.}
+  OPENSSL_sk_copyfunc* = proc (p: pointer): pointer {.cdecl.}
+  OPENSSL_sk_freefunc* = proc (p: pointer) {.cdecl.}
+
+proc OPENSSL_sk_new*(cmp: OPENSSL_sk_compfunc): ptr OPENSSL_STACK {.importc, cdecl.}
+proc OPENSSL_sk_new_null*(): ptr OPENSSL_STACK {.importc, cdecl.}
+proc OPENSSL_sk_new_reserve*(c: OPENSSL_sk_compfunc, n: cint): ptr OPENSSL_STACK {.importc, cdecl.}
+proc OPENSSL_sk_free*(st: ptr OPENSSL_STACK) {.importc, cdecl.}
+proc OPENSSL_sk_pop_free*(st: ptr OPENSSL_STACK, fn: OPENSSL_sk_freefunc) {.importc, cdecl.}
+proc OPENSSL_sk_deep_copy*(st: ptr OPENSSL_STACK, c: OPENSSL_sk_copyfunc, f: OPENSSL_sk_freefunc): ptr OPENSSL_STACK {.importc, cdecl.}
+proc OPENSSL_sk_dup*(st: ptr OPENSSL_STACK): ptr OPENSSL_STACK {.importc, cdecl.}
+
+proc OPENSSL_sk_delete*(st: ptr OPENSSL_STACK, loc: cint): pointer {.importc, cdecl.}
+proc OPENSSL_sk_delete_ptr*(st: ptr OPENSSL_STACK, p: pointer): pointer {.importc, cdecl.}
+proc OPENSSL_sk_find*(st: ptr OPENSSL_STACK, data: pointer): cint {.importc, cdecl.}
+proc OPENSSL_sk_find_all*(st: ptr OPENSSL_STACK, data: pointer, pnum: ptr cint): cint {.importc, cdecl.}
+proc OPENSSL_sk_find_ex*(st: ptr OPENSSL_STACK, data: pointer): cint {.importc, cdecl.}
+proc OPENSSL_sk_insert*(st: ptr OPENSSL_STACK, data: pointer, where: cint): cint {.importc, cdecl.}
+proc OPENSSL_sk_is_sorted*(st: ptr OPENSSL_STACK): cint {.importc, cdecl.}
+proc OPENSSL_sk_num*(st: ptr OPENSSL_STACK): cint {.importc, cdecl.}
+proc OPENSSL_sk_pop*(st: ptr OPENSSL_STACK): pointer {.importc, cdecl.}
+proc OPENSSL_sk_push*(st: ptr OPENSSL_STACK, data: pointer): cint {.importc, cdecl.}
+proc OPENSSL_sk_reserve*(st: ptr OPENSSL_STACK, n: cint): cint {.importc, cdecl.}
+proc OPENSSL_sk_set*(st: ptr OPENSSL_STACK, i: cint, data: pointer): pointer {.importc, cdecl.}
+proc OPENSSL_sk_set_cmp_func*(st: ptr OPENSSL_STACK, cmp: OPENSSL_sk_compfunc): OPENSSL_sk_compfunc {.importc, cdecl.}
+proc OPENSSL_sk_shift*(st: ptr OPENSSL_STACK): pointer {.importc, cdecl.}
+proc OPENSSL_sk_sort*(st: ptr OPENSSL_STACK) {.importc, cdecl.}
+proc OPENSSL_sk_unshift*(st: ptr OPENSSL_STACK, data: pointer): cint {.importc, cdecl.}
+proc OPENSSL_sk_value*(st: ptr OPENSSL_STACK, i: cint): pointer {.importc, cdecl.}
+proc OPENSSL_sk_zero*(st: ptr OPENSSL_STACK) {.importc, cdecl.}
diff --git a/lib/wrappers/openssl/types.nim b/lib/wrappers/openssl/types.nim
new file mode 100644
index 00000000000..b7610854ed7
--- /dev/null
+++ b/lib/wrappers/openssl/types.nim
@@ -0,0 +1,15 @@
+type
+  BIO* {.final.} = object
+  ENGINE* {.pure.} = object
+  EVP_MD* {.pure.} = object
+  EVP_PKEY* {.pure.} = object
+  EVP_PKEY_CTX* {.pure.} = object
+  OSSL_DECODER_CTX* {.pure.} = object
+  OSSL_LIB_CTX* {.pure.} = object
+  SSL* {.pure.} = object
+  SSL_CTX* {.pure.} = object
+  pem_password_cb* = proc (buf: cstring, size: cint, rwflag: cint, u: pointer): cint {.cdecl.}
+
+when defined(nimOpenssl111):
+  type
+    RSA* {.pure.} = object
diff --git a/lib/wrappers/openssl/x509.nim b/lib/wrappers/openssl/x509.nim
new file mode 100644
index 00000000000..ebd2342e85a
--- /dev/null
+++ b/lib/wrappers/openssl/x509.nim
@@ -0,0 +1,113 @@
+import libcrypto
+
+import asn1
+
+type
+  X509* {.pure.} = object
+  X509_STORE_CTX* {.pure.} = object
+
+const
+  X509_FILETYPE_PEM* = 1
+  X509_FILETYPE_ASN1* = 2
+  X509_FILETYPE_DEFAULT* = 3
+
+  X509_V_OK* = 0
+  X509_V_ERR_UNSPECIFIED* = 1
+  X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT* = 2
+  X509_V_ERR_UNABLE_TO_GET_CRL* = 3
+  X509_V_ERR_UNABLE_TO_DECRYPT_CERT_SIGNATURE* = 4
+  X509_V_ERR_UNABLE_TO_DECRYPT_CRL_SIGNATURE* = 5
+  X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY* = 6
+  X509_V_ERR_CERT_SIGNATURE_FAILURE* = 7
+  X509_V_ERR_CRL_SIGNATURE_FAILURE* = 8
+  X509_V_ERR_CERT_NOT_YET_VALID* = 9
+  X509_V_ERR_CERT_HAS_EXPIRED* = 10
+  X509_V_ERR_CRL_NOT_YET_VALID* = 11
+  X509_V_ERR_CRL_HAS_EXPIRED* = 12
+  X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD* = 13
+  X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD* = 14
+  X509_V_ERR_ERROR_IN_CRL_LAST_UPDATE_FIELD* = 15
+  X509_V_ERR_ERROR_IN_CRL_NEXT_UPDATE_FIELD* = 16
+  X509_V_ERR_OUT_OF_MEM* = 17
+  X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT* = 18
+  X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN* = 19
+  X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY* = 20
+  X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE* = 21
+  X509_V_ERR_CERT_CHAIN_TOO_LONG* = 22
+  X509_V_ERR_CERT_REVOKED* = 23
+  X509_V_ERR_NO_ISSUER_PUBLIC_KEY* = 24
+  X509_V_ERR_PATH_LENGTH_EXCEEDED* = 25
+  X509_V_ERR_INVALID_PURPOSE* = 26
+  X509_V_ERR_CERT_UNTRUSTED* = 27
+  X509_V_ERR_CERT_REJECTED* = 28
+  X509_V_ERR_SUBJECT_ISSUER_MISMATCH* = 29
+  X509_V_ERR_AKID_SKID_MISMATCH* = 30
+  X509_V_ERR_AKID_ISSUER_SERIAL_MISMATCH* = 31
+  X509_V_ERR_KEYUSAGE_NO_CERTSIGN* = 32
+  X509_V_ERR_UNABLE_TO_GET_CRL_ISSUER* = 33
+  X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION* = 34
+  X509_V_ERR_KEYUSAGE_NO_CRL_SIGN* = 35
+  X509_V_ERR_UNHANDLED_CRITICAL_CRL_EXTENSION* = 36
+  X509_V_ERR_INVALID_NON_CA* = 37
+  X509_V_ERR_PROXY_PATH_LENGTH_EXCEEDED* = 38
+  X509_V_ERR_KEYUSAGE_NO_DIGITAL_SIGNATURE* = 39
+  X509_V_ERR_PROXY_CERTIFICATES_NOT_ALLOWED* = 40
+  X509_V_ERR_INVALID_EXTENSION* = 41
+  X509_V_ERR_INVALID_POLICY_EXTENSION* = 42
+  X509_V_ERR_NO_EXPLICIT_POLICY* = 43
+  X509_V_ERR_DIFFERENT_CRL_SCOPE* = 44
+  X509_V_ERR_UNSUPPORTED_EXTENSION_FEATURE* = 45
+  X509_V_ERR_UNNESTED_RESOURCE* = 46
+  X509_V_ERR_PERMITTED_VIOLATION* = 47
+  X509_V_ERR_EXCLUDED_VIOLATION* = 48
+  X509_V_ERR_SUBTREE_MINMAX* = 49
+  X509_V_ERR_APPLICATION_VERIFICATION* = 50
+  X509_V_ERR_UNSUPPORTED_CONSTRAINT_TYPE* = 51
+  X509_V_ERR_UNSUPPORTED_CONSTRAINT_SYNTAX* = 52
+  X509_V_ERR_UNSUPPORTED_NAME_SYNTAX* = 53
+  X509_V_ERR_CRL_PATH_VALIDATION_ERROR* = 54
+  X509_V_ERR_PATH_LOOP* = 55
+  X509_V_ERR_SUITE_B_INVALID_VERSION* = 56
+  X509_V_ERR_SUITE_B_INVALID_ALGORITHM* = 57
+  X509_V_ERR_SUITE_B_INVALID_CURVE* = 58
+  X509_V_ERR_SUITE_B_INVALID_SIGNATURE_ALGORITHM* = 59
+  X509_V_ERR_SUITE_B_LOS_NOT_ALLOWED* = 60
+  X509_V_ERR_SUITE_B_CANNOT_SIGN_P_384_WITH_P_256* = 61
+  X509_V_ERR_HOSTNAME_MISMATCH* = 62
+  X509_V_ERR_EMAIL_MISMATCH* = 63
+  X509_V_ERR_IP_ADDRESS_MISMATCH* = 64
+  X509_V_ERR_DANE_NO_MATCH* = 65
+  X509_V_ERR_EE_KEY_TOO_SMALL* = 66
+  X509_V_ERR_CA_KEY_TOO_SMALL* = 67
+  X509_V_ERR_CA_MD_TOO_WEAK* = 68
+  X509_V_ERR_INVALID_CALL* = 69
+  X509_V_ERR_STORE_LOOKUP* = 70
+  X509_V_ERR_NO_VALID_SCTS* = 71
+  X509_V_ERR_PROXY_SUBJECT_NAME_VIOLATION* = 72
+  X509_V_ERR_OCSP_VERIFY_NEEDED* = 73
+  X509_V_ERR_OCSP_VERIFY_FAILED* = 74
+  X509_V_ERR_OCSP_CERT_UNKNOWN* = 75
+  X509_V_ERR_UNSUPPORTED_SIGNATURE_ALGORITHM* = 76
+  X509_V_ERR_SIGNATURE_ALGORITHM_MISMATCH* = 77
+  X509_V_ERR_SIGNATURE_ALGORITHM_INCONSISTENCY* = 78
+  X509_V_ERR_INVALID_CA* = 79
+  X509_V_ERR_PATHLEN_INVALID_FOR_NON_CA* = 80
+  X509_V_ERR_PATHLEN_WITHOUT_KU_KEY_CERT_SIGN* = 81
+  X509_V_ERR_KU_KEY_CERT_SIGN_INVALID_FOR_NON_CA* = 82
+  X509_V_ERR_ISSUER_NAME_EMPTY* = 83
+  X509_V_ERR_SUBJECT_NAME_EMPTY* = 84
+  X509_V_ERR_MISSING_AUTHORITY_KEY_IDENTIFIER* = 85
+  X509_V_ERR_MISSING_SUBJECT_KEY_IDENTIFIER* = 86
+  X509_V_ERR_EMPTY_SUBJECT_ALT_NAME* = 87
+  X509_V_ERR_EMPTY_SUBJECT_SAN_NOT_CRITICAL* = 88
+  X509_V_ERR_CA_BCONS_NOT_CRITICAL* = 89
+  X509_V_ERR_AUTHORITY_KEY_IDENTIFIER_CRITICAL* = 90
+  X509_V_ERR_SUBJECT_KEY_IDENTIFIER_CRITICAL* = 91
+  X509_V_ERR_CA_CERT_MISSING_KEY_USAGE* = 92
+  X509_V_ERR_EXTENSIONS_REQUIRE_VERSION_3* = 93
+  X509_V_ERR_EC_KEY_EXPLICIT_PARAMS* = 94
+  X509_V_ERR_RPK_UNTRUSTED* = 95
+
+DECLARE_ASN1_FUNCTIONS(X509)
+
+proc X509_verify_cert_error_string*(n: clong): cstring {.importc, cdecl.}
diff --git a/lib/wrappers/openssl/x509v3.nim b/lib/wrappers/openssl/x509v3.nim
new file mode 100644
index 00000000000..31685b49800
--- /dev/null
+++ b/lib/wrappers/openssl/x509v3.nim
@@ -0,0 +1,13 @@
+import libcrypto
+
+import x509
+
+const
+  X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT* = 0x1
+  X509_CHECK_FLAG_NO_WILDCARDS* = 0x2
+  X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS* = 0x4
+  X509_CHECK_FLAG_MULTI_LABEL_WILDCARDS* = 0x8
+  X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS* = 0x10
+  X509_CHECK_FLAG_NEVER_CHECK_SUBJECT* = 0x20
+
+proc X509_check_host*(x: ptr X509, name: cstring, namelen: csize_t, flags: cuint, peername: ptr cstring): cint {.importc, cdecl.}
diff --git a/tests/stdlib/web/thttpclient_ssl.nim b/tests/stdlib/web/thttpclient_ssl.nim
index 89cef74e557..70db97344d3 100644
--- a/tests/stdlib/web/thttpclient_ssl.nim
+++ b/tests/stdlib/web/thttpclient_ssl.nim
@@ -13,138 +13,148 @@ discard """
 ## Test with:
 ## ./bin/nim c -d:ssl -p:. --threads:on -r tests/stdlib/thttpclient_ssl.nim
 
-when not defined(windows):
-  # Disabled on Windows due to old OpenSSL version
-
-  import
-    httpclient,
-    net,
-    openssl,
-    os,
-    strutils,
-    threadpool,
-    times,
-    unittest
-
-  # bogus self-signed certificate
-  const
-    certFile = "tests/stdlib/thttpclient_ssl_cert.pem"
-    keyFile = "tests/stdlib/thttpclient_ssl_key.pem"
-
-  proc log(msg: string) =
-    when defined(ssldebug):
-      echo "    [" & $epochTime() & "] " & msg
-    # FIXME
+import
+  httpclient,
+  net,
+  openssl/[ssl, err],
+  os,
+  strutils,
+  times,
+  unittest
+
+# bogus self-signed certificate
+const
+  certFile = "tests/stdlib/web/thttpclient_ssl_cert.pem"
+  keyFile = "tests/stdlib/web/thttpclient_ssl_key.pem"
+
+proc log(msg: string) =
+  when defined(ssldebug):
     echo "    [" & $epochTime() & "] " & msg
-    discard
-
-  proc runServer(port: Port): bool {.thread.} =
-    ## Run a trivial HTTPS server in a {.thread.}
-    ## Exit after serving one request
-
-    var socket = newSocket()
-    socket.setSockOpt(OptReusePort, true)
-    socket.bindAddr(port)
-
-    var ctx = newContext(certFile=certFile, keyFile=keyFile)
-
-    ##  Handle one connection
-    socket.listen()
-
-    var client: Socket
-    var address = ""
-
-    log "server: ready"
-    socket.acceptAddr(client, address)
-    log "server: incoming connection"
-
-    var ssl: SslPtr = SSL_new(ctx.context)
-    discard SSL_set_fd(ssl, client.getFd())
-    log "server: accepting connection"
-    ErrClearError()
-    if SSL_accept(ssl) <= 0:
-      ERR_print_errors_fp(stderr)
-    else:
-      const reply = "HTTP/1.0 200 OK\r\nServer: test\r\nContent-type: text/html\r\nContent-Length: 0\r\n\r\n"
-      log "server: sending reply"
-      discard SSL_write(ssl, reply.cstring, reply.len)
-
-    log "server: receiving a line"
-    let line = client.recvLine()
-    log "server: received $# bytes" % $line.len
-    log "closing"
-    SSL_free(ssl)
-    close(client)
-    close(socket)
-    log "server: exited"
-
-
-  # XXX: Disabled until we bring back `spawn`, more likely replace it with
-  #      something entirely new. Kept for reference if/when these need to be
-  #      replaced.
-  # suite "SSL self signed certificate check":
-
-  #   test "TCP socket":
-  #     const port = 12347.Port
-  #     let t = spawn runServer(port)
-  #     sleep(100)
-  #     var sock = newSocket()
-  #     var ctx = newContext()
-  #     ctx.wrapSocket(sock)
-  #     try:
-  #       log "client: connect"
-  #       sock.connect("127.0.0.1", port)
-  #       fail()
-  #     except:
-  #       let msg = getCurrentExceptionMsg()
-  #       check(msg.contains("certificate verify failed"))
-
-  #   test "HttpClient default: no check":
-  #     const port = 12345.Port
-  #     let t = spawn runServer(port)
-  #     sleep(100)
-
-  #     var client = newHttpClient(sslContext=newContext(verifyMode=CVerifyNone))
-  #     try:
-  #       log "client: connect"
-  #       discard client.getContent("https://127.0.0.1:12345")
-  #     except:
-  #       let msg = getCurrentExceptionMsg()
-  #       log "client: unexpected exception: " & msg
-  #       fail()
-
-  #   test "HttpClient with CVerifyPeer":
-  #     const port = 12346.Port
-  #     let t = spawn runServer(port)
-  #     sleep(100)
-
-  #     var client = newHttpClient(sslContext=newContext(verifyMode=CVerifyPeer))
-  #     try:
-  #       log "client: connect"
-  #       discard client.getContent("https://127.0.0.1:12346")
-  #       log "getContent should have raised an exception"
-  #       fail()
-  #     except:
-  #       let msg = getCurrentExceptionMsg()
-  #       log "client: exception: " & msg
-  #       # SSL_shutdown:shutdown while in init
-  #       if not (msg.contains("alert number 48") or
-  #         msg.contains("certificate verify failed")):
-  #         echo "CVerifyPeer exception: " & msg
-  #         check(false)
-
-  #   test "HttpClient with CVerifyPeerUseEnvVars":
-  #     const port = 12346.Port
-  #     let t = spawn runServer(port)
-  #     sleep(100)
-
-  #     putEnv("SSL_CERT_FILE", getCurrentDir() / certFile)
-  #     var client = newHttpClient(sslContext=newContext(verifyMode=CVerifyPeerUseEnvVars))
-  #     try:
-  #       log "client: connect"
-  #       discard client.getContent("https://127.0.0.1:12346")
-  #     except:
-  #       let msg = getCurrentExceptionMsg()
-  #       log "client: exception: " & msg
-  #       log "getContent should not have raised an exception"
-  #       fail()
+  # FIXME
+  echo "    [" & $epochTime() & "] " & msg
+  discard
+
+proc sslErrCallback(str: cstring, len: csize_t, u: pointer): cint {.cdecl.} =
+  cint: writeBuffer(stderr, str, len)
+
+proc runServer(port: Port) {.thread.} =
+  ## Run a trivial HTTPS server in a {.thread.}
+  ## Exit after serving one request
+
+  var socket = newSocket()
+  defer: close(socket)
+  socket.setSockOpt(OptReusePort, true)
+  socket.bindAddr(port)
+
+  var ctx = newContext(certFile=certFile, keyFile=keyFile)
+  defer: destroyContext(ctx)
+
+  ##  Handle one connection
+  socket.listen()
+
+  var client: Socket
+  var address = ""
+
+  log "server: ready"
+  socket.acceptAddr(client, address)
+  defer: close(client)
+  log "server: incoming connection"
+
+  var ssl: ptr SSL = SSL_new(ctx.context)
+  defer: SSL_free(ssl)
+  discard SSL_set_fd(ssl, client.getFd().cint)
+  log "server: accepting connection"
+  ErrClearError()
+  if SSL_accept(ssl) <= 0:
+    ERR_print_errors_cb(sslErrCallback, nil)
+    return
+
+  const reply = "HTTP/1.0 200 OK\r\nServer: test\r\nContent-type: text/html\r\nContent-Length: 0\r\n\r\n"
+  log "server: sending reply"
+  discard SSL_write(ssl, reply.cstring, reply.len)
+
+  log "server: receiving data"
+  var buf: array[4096, char]
+  let read = SSL_read(ssl, addr buf[0], buf.len.cint)
+  if read <= 0:
+    ERR_print_errors_cb(sslErrCallback, nil)
+    return
+  log "server: received $# bytes" % $read
+  log "closing"
+  log "server: exited"
+
+
+suite "SSL self signed certificate check":
+  test "TCP socket":
+    const port = 12347.Port
+    let t = createThread(runServer, port)
+    defer: joinThread(t)
+    sleep(100)
+    var sock = newSocket()
+    defer: close(sock)
+    var ctx = newContext()
+    defer: destroyContext(ctx)
+    ctx.wrapSocket(sock)
+    try:
+      log "client: connect"
+      sock.connect("127.0.0.1", port)
+      fail()
+    except:
+      let msg = getCurrentExceptionMsg()
+      check(msg.contains("certificate verify failed"))
+
+  test "HttpClient default: no check":
+    const port = 12345.Port
+    let t = createThread(runServer, port)
+    defer: joinThread(t)
+    sleep(100)
+
+    var client = newHttpClient(sslContext=newContext(verifyMode=CVerifyNone))
+    defer: close(client)
+    try:
+      log "client: connect"
+      discard client.getContent("https://127.0.0.1:12345")
+    except:
+      let msg = getCurrentExceptionMsg()
+      log "client: unexpected exception: " & msg
+      fail()
+
+  test "HttpClient with CVerifyPeer":
+    const port = 12346.Port
+    let t = createThread(runServer, port)
+    defer: joinThread(t)
+    sleep(100)
+
+    var client = newHttpClient(sslContext=newContext(verifyMode=CVerifyPeer))
+    defer: close(client)
+    try:
+      log "client: connect"
+      discard client.getContent("https://127.0.0.1:12346")
+      log "getContent should have raised an exception"
+      fail()
+    except:
+      let msg = getCurrentExceptionMsg()
+      log "client: exception: " & msg
+      # SSL_shutdown:shutdown while in init
+      if not (msg.contains("alert number 48") or
+        msg.contains("certificate verify failed")):
+        echo "CVerifyPeer exception: " & msg
+        check(false)
+
+  test "HttpClient with CVerifyPeerUseEnvVars":
+    const port = 12346.Port
+    let t = createThread(runServer, port)
+    defer: joinThread(t)
+    sleep(100)
+
+    putEnv("SSL_CERT_FILE", getCurrentDir() / certFile)
+    var client = newHttpClient(sslContext=newContext(verifyMode=CVerifyPeerUseEnvVars))
+    defer: close(client)
+    try:
+      log "client: connect"
+      discard client.getContent("https://127.0.0.1:12346")
+    except:
+      let msg = getCurrentExceptionMsg()
+      log "client: exception: " & msg
+      log "getContent should not have raised an exception"
+      fail()
diff --git a/tests/stdlib/web/topenssl.nim b/tests/stdlib/web/topenssl.nim
index 4c38b42164c..32b1141dad4 100644
--- a/tests/stdlib/web/topenssl.nim
+++ b/tests/stdlib/web/topenssl.nim
@@ -1,38 +1,81 @@
 import std/wordwrap
-import openssl
+import openssl/[bio, evp, rsa]
+
+when not defined(nimOpenssl111):
+  import openssl/[core_dispatch, decoder]
+else:
+  import openssl/pem
 
 const PubKey = r"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknKWvrdnncCIzBnIGrZ5qtZrPH+Yo3t7ag9WZIu6Gmc/JgIDDaZhJeyGW0YSnifeAEhooWvM4jDWhTEARzktalSHqYtmwI/1Oxwp6NTYH8akMe2LCpZ5pX9FVA6m9o2tkbdXatbDKRqeD4UA8Ow7Iyrdo6eb1SU8vk+26i+uXHTtsb25p8uf2ppOJrJCy+1vr8Gsnuwny1UdoYZTxMsxRFPf+UX/LrSXMHVq/oPVa3SJ4VHMpYrG/httAugVP6K58xiZ93jst63/dd0JL85mWJu1uS3uz92aL5O97xzth3wR4BbdmDUlN4LuTIwi6DtEcC7gUOTnOzH4zgp2b5RyHwIDAQAB"
 const PrivateKey = r"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"
 
+proc rsaPemDecode(key: string, public: bool): ptr EVP_PKEY =
+  let mKey =
+    if public:
+      "-----BEGIN PUBLIC KEY-----\n" & key.wrapWords(64) & "\n-----END PUBLIC KEY-----"
+    else:
+      "-----BEGIN RSA PRIVATE KEY-----\n" & key.wrapWords(64) & "\n-----END RSA PRIVATE KEY-----"
+
+  let bio = BIO_new_mem_buf(addr mKey[0], mKey.len.cint)
+  doAssert bio != nil
+  when not defined(nimOpenssl111):
+    let selection: cint = if public: OSSL_KEYMGMT_SELECT_PUBLIC_KEY else: OSSL_KEYMGMT_SELECT_PRIVATE_KEY
+    let dctx = OSSL_DECODER_CTX_new_for_pkey(addr result, input_type = "PEM", input_struct = nil, keytype = "RSA", selection, nil, nil)
+    doAssert dctx != nil
+    doAssert OSSL_DECODER_from_bio(dctx, bio) == 1
+    doAssert result != nil
+    OSSL_DECODER_CTX_free(dctx)
+  else:
+    let rsa =
+      if public:
+        PEM_read_bio_RSA_PUBKEY(bio, nil, nil, "".cstring)
+      else:
+        PEM_read_bio_RSAPrivateKey(bio, nil, nil, "".cstring)
+
+    doAssert rsa != nil
+    result = EVP_PKEY_new()
+    doAssert result != nil
+    doAssert EVP_PKEY_assign_RSA(result, rsa) == 1
+
+  BIO_free_all(bio)
+
 proc rsaPublicEncrypt(fr: string): string =
-  let mKey = "-----BEGIN PUBLIC KEY-----\n" & PubKey.wrapWords(64) & "\n-----END PUBLIC KEY-----"
-  let bio = bioNew(bioSMem())
-  doAssert BIO_write(bio, mKey.cstring, mKey.len.cint) >= 0
-  let rsa = PEM_read_bio_RSA_PUBKEY(bio, nil, nil, nil)
-  doAssert rsa != nil
-  doAssert BIO_free(bio) >= 0
-  result = newString(RSA_size(rsa))
-  let frdata = cast[ptr uint8](fr.cstring)
-  var todata = cast[ptr uint8](result.cstring)
-  doAssert RSA_public_encrypt(fr.len.cint, frdata, todata, rsa, RSA_PKCS1_PADDING) != -1
-  RSA_free(rsa)
+  let pkey = rsaPemDecode(PubKey, public = true)
+  let ectx = EVP_PKEY_CTX_new_from_pkey(nil, pkey, nil)
+  doAssert ectx != nil
+  EVP_PKEY_free(pkey)
+  doAssert EVP_PKEY_encrypt_init(ectx) == 1
+  doAssert EVP_PKEY_CTX_set_rsa_padding(ectx, RSA_PKCS1_PADDING) == 1
+
+  let frdata = cast[ptr UncheckedArray[cuchar]](fr.cstring)
+  var outlen: csize_t
+  doAssert EVP_PKEY_encrypt(ectx, nil, addr outlen, frdata, fr.len.csize_t) == 1
+
+  result.setLen(outlen)
+  let todata = cast[ptr UncheckedArray[cuchar]](result.cstring)
+  doAssert EVP_PKEY_encrypt(ectx, todata, addr outlen, frdata, fr.len.csize_t) == 1
+  result.setLen(outlen)
+
+  EVP_PKEY_CTX_free(ectx)
 
 proc rasPrivateDecrypt(fr: string): string =
-  let mKey = "-----BEGIN RSA PRIVATE KEY-----\n" & PrivateKey.wrapWords(64) & "\n-----END RSA PRIVATE KEY-----"
-  let bio = bioNew(bioSMem())
-  doAssert BIO_write(bio, mKey.cstring, mKey.len.cint) >= 0
-  let rsa = PEM_read_bio_RSAPrivateKey(bio, nil, nil, nil)
-  doAssert rsa != nil
-  doAssert BIO_free(bio) >= 0
-  let rsaLen = RSA_size(rsa)
-  result = newString(rsaLen)
-  let frdata = cast[ptr uint8](fr.cstring)
-  var todata = cast[ptr uint8](result.cstring)
-  let lenOrig = RSA_private_decrypt(rsaLen, frdata, todata, rsa, RSA_PKCS1_PADDING)
-  doAssert lenOrig >= 0 and lenOrig < result.len
-  doAssert result[lenOrig] == '\0'
-  result.setLen lenOrig
-  RSA_free(rsa)
+  let pkey = rsaPemDecode(PrivateKey, public = false)
+  let ectx = EVP_PKEY_CTX_new_from_pkey(nil, pkey, nil)
+  doAssert ectx != nil
+  EVP_PKEY_free(pkey)
+  doAssert EVP_PKEY_decrypt_init(ectx) == 1
+  doAssert EVP_PKEY_CTX_set_rsa_padding(ectx, RSA_PKCS1_PADDING) == 1
+
+  let frdata = cast[ptr UncheckedArray[cuchar]](fr.cstring)
+  var outlen: csize_t
+  doAssert EVP_PKEY_decrypt(ectx, nil, addr outlen, frdata, fr.len.csize_t) == 1
+
+  result.setLen(outlen)
+  let todata = cast[ptr UncheckedArray[cuchar]](result.cstring)
+  doAssert EVP_PKEY_decrypt(ectx, todata, addr outlen, frdata, fr.len.csize_t) == 1
+  result.setLen(outlen)
+
+  EVP_PKEY_CTX_free(ectx)
 
 let res = "TEST"
 let miwen = rsaPublicEncrypt(res)
diff --git a/tests/untestable/tssl.nim b/tests/untestable/tssl.nim
index fca6385f87f..7efd94453bd 100644
--- a/tests/untestable/tssl.nim
+++ b/tests/untestable/tssl.nim
@@ -18,10 +18,10 @@
 import httpclient, os
 from strutils import contains, toHex
 
-from openssl import getOpenSSLVersion
+from openssl/crypto import OpenSSL_version_num
 
 when true:
-  echo "version: 0x" & $getOpenSSLVersion().toHex()
+  echo "version: 0x" & OpenSSL_version_num().toHex()
 
   let client = newHttpClient()
   # hacky SSL check
diff --git a/tools/ssl_config_parser.nim b/tools/ssl_config_parser.nim
index 6c0cccf1cc5..fe2b53faeff 100644
--- a/tools/ssl_config_parser.nim
+++ b/tools/ssl_config_parser.nim
@@ -37,10 +37,10 @@ proc main() =
 
   for name, config in configs["configurations"]:
     let
-      constantName = "Ciphers" & name[0].toUpperAscii & name[1..^1]
+      ciphersName = "Ciphers" & name[0].toUpperAscii & name[1..^1]
 
     var ciphers: string
-    for c in config["ciphersuites"].getElems & config["ciphers"]["openssl"].getElems:
+    for c in config["ciphers"]["openssl"].getElems:
       if ciphers.len == 0:
         ciphers.add c.getStr
       else:
@@ -48,7 +48,7 @@ proc main() =
         ciphers.add c.getStr
 
     var constant = &"""
-const {constantName}* = "{ciphers}"
+const {ciphersName}* = "{ciphers}"
   ## An OpenSSL-compatible list of secure ciphers for ``{name}`` compatibility
   ## per Mozilla's recommendations.
   ##
@@ -59,6 +59,28 @@ const {constantName}* = "{ciphers}"
       constant.add "  ## * " & c.getStr
       constant.add '\n'
 
+    let
+      ciphersuitesName = "Ciphersuites" & name[0].toUpperAscii & name[1..^1]
+
+    var ciphersuites: string
+    for c in config["ciphersuites"].getElems:
+      if ciphersuites.len == 0:
+        ciphersuites.add c.getStr
+      else:
+        ciphersuites.add ':'
+        ciphersuites.add c.getStr
+
+    constant = &"""
+{constant}
+
+const {ciphersuitesName}* = "{ciphersuites}"
+  ## An OpenSSL-compatible list of secure ciphersuites for ``{name}`` compatibility
+  ## per Mozilla's recommendations.
+  ##
+  ## To be employed with ``{ciphersName}``
+"""
+
     output.writeLine constant
 
+
 when isMainModule: main()