accessor rather than digging in the struct directly which no longer works in libressl (state was moved to internal).