(As part of getting rid of OpenSSL dependency)
See discussion in #5885.
What remains to be done: factor @sipa's code in that pull out into an external library like secp256k1, univalue.