I would love to see a clean, narrowly scoped replacement for OpenSSL.

Please choose an appropriate all-permissive, GPL-compatible license for it; the license of OpenSSL, with advertising clause, causes a huge amount of pain.