I would contend that OpenSSL is the right way, given our testing of secure defaults and unified TLS/HTTPS implementation across all platforms. But I am always happy to review code and explore other TLS/HTTPS stacks.