needs is not yet in libressl
X509_STORE_CTX_verify_cb

use the name field from configure.json 
check flags for md4c, openssl

how to handle sub-depends stuff
rename some options as TQ6*