One of the failures here is using SSL_CIPHER->algo_strength, which has been removed with, as far as I can see, no replacement.
I've raised a bug against OpenSSL upstream to consider exposing this: https://github.com/openssl/openssl/issues/3795 Chris.
