Supporting older version of libssl is an overhead that should be avoided, because those versions are out of maintenance. Enabling tls in cdp only if libssl is a supported version at this moment would be good, if you can make a PR for it would be great of course.