I wrote:
It looks like it's more complex than just using OpenVPN code.
I just found that native CryptoAPI code was added to OpenSSL 0.9.8i in 2008 by Steve Henson. OpenSSL could use some better documentation. 8-)
Now I'm looking for a way to use this new code (a.k.a. "capi" engine) in stunnel.
Mike