Work with older versions of OpenSSL.
Verify certs during the fetch process, by asking for consistency proofs at the end of each batch
We need OpenSSL 1.0.2 for a full build.