anchor.diff:      end.
   
   is_sane_ecc(openssl) ->
  -    case os:cmd("openssl version") of
  +    case portable_cmd("openssl", ["version"]) of
   	"OpenSSL 1.0.0a" ++ _ -> % Known bug in openssl
   	    %% manifests as SSL_CHECK_SERVERHELLO_TLSEXT:tls invalid ecpointformat list
   	    false;
  
positive.code: check_sane_openssl_renegotaite(Config, Version) when  Version == 'tlsv1';
                                                        Version == 'tlsv1.1';
                                                        Version == 'tlsv1.2' ->
      case os:cmd("openssl version") of     
  	"OpenSSL 1.0.1c" ++ _ ->
  	    {skip, "Known renegotiation bug in OpenSSL"};
  	"OpenSSL 1.0.1b" ++ _ ->
  
negative.code:             false
          end.
  openssl_sane_client_cert() -> 
      case portable_cmd("openssl", ["version"]) of
          "LibreSSL 2.5.2" ++ _ ->
              true;
          "LibreSSL 2.4" ++ _ ->
  