- use options framework - new option WITH_FIPS add fips code - new option WITH_SCTP add SCTP support to openssl