Why not simply require 1.0.1f? Is there some platform that version won't build for? Are we concerned about this? Libraries often have version requirements on their dependencies, and when talking about SSL I don't think this is onerous.