Comment 1 for bug 1198183

Agree; calling openssl directly has only proven to be a source of debugging difficulty for deployers that I think switching to pyopenssl could help relieve (we'd be able to catch exceptions, provide more relevant error feedback, etc). I'm not aware of any reason why we can't utilize pyopenssl instead.