openssl 1.1.0 is not API backward compatible with 1.0.0, and vermont will not compile with the newer version. The cmake find_package macro has no way to specify a maximum version so check it explicitly.