Also add a test for openssl runtime version matching packaging version

not yet built locally because slow networks and computers and such
let's see what CI does with it

this means we don't have to download it every time

Maybe I should be wasting my time learning about Hydra instead ...