You need OpenSSL v3.0.0 or higher.
This FAQ, while citing certiicates, does apply to the entire host.