编译python3.7+openssl 1.1.1+的时候遇到问题X509_VERIFY_PARAM_set1_host()

报错如下
Failed to build these modules:
_hashlib _ssl

Could not build the ssl module!
Python requires an OpenSSL 1.0.2 or 1.1 compatible libssl with X509_VERIFY_PARAM_set1_host().
LibreSSL 2.6.4 and earlier do not provide the necessary APIs, https://github.com/libressl-portable/portable/issues/381

编译的命令
./configure --with-ensurepip=yes --prefix=/soft/python/3.9.0 --with-openssl=/soft/openssl/1.1.1k
请问如何解决？
查询了网上关于CPPFLAGS="-I/xxxxx/include" LDFLAGS="-L/xxxxxx/lib" 这些都不行！