It's been a while and we have accumulated a few patches in the maint branch, so I think it's about time to make our next release.

• Make sure valgrind is clean (except for OpenSSL which is almost impossible to do)
• Drop SSL in favour of TLS (ssl: dump the SSL ciphers in favour of TLS #2625)
  • We currently load every single cipher into OpenSSL, we should limit which ones we accept to require at least TLSv1.
• Bump the version number in the header (Taged v0.21.1 release did not bump the revision number #2504)
• Prepare release notes
• Release

The change in OpenSSL is arguably an API change, but it's bound to be important enough, especially in light of the recent deprecation of everything crypto.