Factor OpenSSL specifics out to crypto-openssl.c, hide secret DH key