Thank you for the question,

Oat++ provides interfaces to substitute SSL backend. One can easily substitute any SSL backend by implementing two class: - Connection - ConnectionProvider

Currently there is an adapter for LibreSSL https://github.com/oatpp/oatpp-libressl/tree/master/server

But if you need TLS 1.3 one may add GnuTLS adapter for example