At this point, I feel like it's actively negligent to have openssl or gnutls in your project as a dependency.