Both `-lcrypto` and `-lssl` are tested against `$(SRCROOT)/External` first, which has a `libcrypto.a` symlink in it. If that resolves, we’re done; otherwise, it falls back to system dylibs (which is fine).