> I was told OpenSSL 3 was bad for the longest time, I used 1.1x for everything, but switched to Libressl.

Not sure who told you OpenSSL 3 (2021) was bad. It postdates the period where OpenSSL might not have been the right choice. (Among other things, OpenSSL 3 unifies FIPS and non-FIPS consumers, which is nice if you need FIPS.)

> There was a dark period between 2010 and 2016 where OpenSSL might not have been the right answer, but that time has passed. OpenSSL has gotten better, and, more importantly, OpenSSL is on-the-ball with vulnerability disclosure and response.

> Using anything besides OpenSSL will drastically complicate your system for little, no, or even negative security benefit. So just keep it simple.

https://latacora.micro.blog/2018/04/03/cryptographic-right-a...