There are likely problems mixing different OpenSSL shared object versions in pkgsrc, no? If NetBSD 10 is to have OpenSSL 1.1 I think it's critical we establish a flow for maintaining it in the long term (whether it's by pulling patches from Red Hat, etc), so it doesn't rot like netbsd-8.