This switches the SSL library for (lib)curl from the (OpenWrt default) wolfssl to openssl. It should fix all LetsEncrypt DST expiry related issues.
(OpenSSL is preferred on our hardware as it supports the ARM Crypto extensions, wolfssl ended up being used by accident)
An updated recovery firmware to fix the baremetal side is coming in the next few days to fix the same issue.