strings are hard, be explicit
Mirror the OpenSSL API as is our idiom.