Backported from 82c1d8c3.
From NEWS:
1.3.1 Change supported libressl version to 3.5 Only warn on PEM_write_ECPrivateKey() failure instead of everytime ec_create_key() is called Plug leak in ec_key_create() Check that the challenge token which is turned into a filename is base64url encoded