We don't need OpenSSL, we need another library built from scratch with very clean code and documentation.

Well, feel free to hop to it, then.

If you've known about this for a while and haven't done anything, then you're part of the problem.