diff --git a/.gitmodules b/.gitmodules
index 05b289b6c7b..8e54cadbecd 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -1,6 +1,3 @@
 [submodule "external/catch"]
 	path = external/catch
 	url = https://github.com/catchorg/Catch2.git
-[submodule "tools/vcpkg/ports"]
-	path = tools/vcpkg/ports
-	url = https://github.com/microsoft/vcpkg.git
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 37a1bf9c132..19bcc96b229 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,16 +2,16 @@
 
 ### Enhancements
 * <New feature description> (PR [#????](https://github.com/realm/realm-core/pull/????))
-* None.
+* Upgrade OpenSSL from 1.1.1n to 3.0.7. ([#6097](https://github.com/realm/realm-core/pull/6097))
 
 ### Fixed
 * <How do the end-user experience this issue? what was the impact?> ([#????](https://github.com/realm/realm-core/issues/????), since v?.?.?)
 * None.
  
 ### Breaking changes
+* Core no longer provides any vcpkg infrastructure (the ports submodule and overlay triplets), because it handles dependant libraries internally now.
 * Allow Realm instances to have a complete view of their schema, if mode is additive. ([PR #5784](https://github.com/realm/realm-core/pull/5784)).
 
-
 ### Compatibility
 * Fileformat: Generates files with format v23. Reads and automatically upgrade from fileformat v5.
 
diff --git a/CMakeLists.txt b/CMakeLists.txt
index b9280746ac1..8ad52cba7f7 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -19,6 +19,7 @@ include(SpecialtyBuilds)
 include(GetVersion)
 include(CheckCXXCompilerFlag)
 include(CheckCXXSourceRuns)
+include(AcquireRealmDependency)
 
 include(CodeCoverage)
 
@@ -130,8 +131,6 @@ if(ANDROID)
     add_compile_options(-fdata-sections -ffunction-sections -fomit-frame-pointer -fsigned-char -fstrict-aliasing -funwind-tables -no-canonical-prefixes $<$<CONFIG:Release>:-Oz>)
 endif()
 
-set(OPENSSL_VERSION ${DEP_OPENSSL_VERSION})
-
 set(CMAKE_DEBUG_POSTFIX "-dbg")
 set(CMAKE_MINSIZEDEBUG_POSTFIX "-dbg")
 
@@ -228,52 +227,15 @@ elseif(CMAKE_SYSTEM_NAME MATCHES "Linux|Android")
 endif()
 
 if(REALM_NEEDS_OPENSSL OR REALM_FORCE_OPENSSL)
-    set(OPENSSL_USE_STATIC_LIBS ON)
-    if(VCPKG_TOOLCHAIN)
-        # If we're building with vcpkg, prefer to find OpenSSL there first
-        find_package(OpenSSL)
-    endif()
-    # We aren't building with vcpkg, or it didn't have OpenSSL
-    if(NOT OpenSSL_FOUND)
-        if(ANDROID OR (CMAKE_SYSTEM_NAME STREQUAL "Linux" AND CMAKE_SYSTEM_PROCESSOR STREQUAL "x86_64"))
-            # We have prebuilt OpenSSL tarballs for Android and Linux x86_64
-            set(_realm_have_prebuilt_openssl ON)
-        endif()
-        if(NOT REALM_USE_SYSTEM_OPENSSL AND _realm_have_prebuilt_openssl)
-            # Use our own prebuilt OpenSSL
-            if(NOT OpenSSL_DIR)
-                if(NOT EXISTS ${CMAKE_CURRENT_BINARY_DIR}/openssl/lib/cmake/OpenSSL/OpenSSLConfig.cmake)
-                    if(ANDROID)
-                        set(OPENSSL_URL "http://static.realm.io/downloads/openssl/${OPENSSL_VERSION}/Android/${CMAKE_ANDROID_ARCH_ABI}/openssl.tar.gz")
-                    else()
-                        set(OPENSSL_URL "http://static.realm.io/downloads/openssl/${OPENSSL_VERSION}/Linux/x86_64/openssl.tar.gz")
-                    endif()
-
-                    message(STATUS "Getting ${OPENSSL_URL}...")
-                    file(DOWNLOAD "${OPENSSL_URL}" "${CMAKE_CURRENT_BINARY_DIR}/openssl/openssl.tar.gz" STATUS download_status)
-
-                    list(GET download_status 0 status_code)
-                    if (NOT "${status_code}" STREQUAL "0")
-                        message(FATAL_ERROR "Downloading ${url}... Failed. Status: ${download_status}")
-                    endif()
-
-                    message(STATUS "Uncompressing OpenSSL...")
-                    execute_process(
-                        COMMAND ${CMAKE_COMMAND} -E tar xfz "openssl.tar.gz"
-                        WORKING_DIRECTORY "${CMAKE_CURRENT_BINARY_DIR}/openssl"
-                    )
-                endif()
-
-                set(OpenSSL_DIR "${CMAKE_CURRENT_BINARY_DIR}/openssl/lib/cmake/OpenSSL")
-            endif()
-            find_package(OpenSSL REQUIRED CONFIG)
-            target_link_libraries(OpenSSL::SSL INTERFACE OpenSSL::Crypto)
-        else()
-            # Use whatever OpenSSL CMake finds on the system
-            find_package(OpenSSL REQUIRED)
-        endif()
+    if(NOT REALM_USE_SYSTEM_OPENSSL AND (ANDROID OR WIN32 OR CMAKE_SYSTEM_NAME STREQUAL "Linux"))
+        # Use our own prebuilt OpenSSL
+        realm_acquire_dependency(openssl ${DEP_OPENSSL_VERSION} OPENSSL_CMAKE_INCLUDE_FILE)
+
+        include(${OPENSSL_CMAKE_INCLUDE_FILE})
     endif()
 
+    set(OPENSSL_USE_STATIC_LIBS ON)
+    find_package(OpenSSL REQUIRED)
     set(REALM_HAVE_OPENSSL ON)
     string(REGEX MATCH "^([0-9]+)\\.([0-9]+)" OPENSSL_VERSION_MAJOR_MINOR ${OPENSSL_VERSION})
 elseif(APPLE)
@@ -285,7 +247,10 @@ endif()
 # so for an iOS build it'll use the path from the Device plaform, which is an error on Simulator.
 # Just use -lz and let Xcode figure it out
 if(NOT APPLE AND NOT TARGET ZLIB::ZLIB)
-    if(ANDROID)
+    if(WIN32)
+        realm_acquire_dependency(zlib ${DEP_WIN32_ZLIB_VERSION} ZLIB_CMAKE_INCLUDE_FILE)
+        include(${ZLIB_CMAKE_INCLUDE_FILE})
+    elseif(ANDROID)
         # On Android FindZLIB chooses the static libz over the dynamic one, but this leads to issues
         # (see https://github.com/android/ndk/issues/1179)
         # We want to link against the stub library instead of statically linking anyway,
@@ -364,7 +329,8 @@ if(REALM_ENABLE_SYNC)
     list(APPEND REALM_EXPORTED_TARGETS Sync)
 endif()
 export(TARGETS ${REALM_EXPORTED_TARGETS} NAMESPACE Realm:: FILE RealmTargets.cmake)
-configure_file(${CMAKE_CURRENT_LIST_DIR}/tools/cmake/RealmConfig.cmake.in ${CMAKE_CURRENT_BINARY_DIR}/RealmConfig.cmake @ONLY)
+configure_file(tools/cmake/RealmConfig.cmake.in ${CMAKE_CURRENT_BINARY_DIR}/RealmConfig.cmake @ONLY)
+configure_file(tools/cmake/AcquireRealmDependency.cmake ${CMAKE_CURRENT_BINARY_DIR}/AcquireRealmDependency.cmake @ONLY)
 
 # Make the project importable from the install directory
 install(EXPORT realm
@@ -379,6 +345,11 @@ install(FILES ${CMAKE_CURRENT_BINARY_DIR}/RealmConfig.cmake
         COMPONENT devel
 )
 
+install(FILES tools/cmake/AcquireRealmDependency.cmake
+        DESTINATION lib/cmake/Realm
+        COMPONENT devel
+)
+
 # CPack
 set(CPACK_GENERATOR "TGZ")
 set(CPACK_PACKAGE_VERSION ${REALM_VERSION})
diff --git a/Jenkinsfile b/Jenkinsfile
index 15204345619..b202930fbf7 100755
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -547,12 +547,6 @@ def doBuildWindows(String buildType, boolean isUWP, String platform, boolean run
       CMAKE_BUILD_TYPE: buildType,
       REALM_ENABLE_SYNC: "ON",
       CPACK_SYSTEM_NAME: cpackSystemName,
-      CMAKE_TOOLCHAIN_FILE: '%WORKSPACE%/tools/vcpkg/ports/scripts/buildsystems/vcpkg.cmake',
-      VCPKG_MANIFEST_DIR: '%WORKSPACE%/tools/vcpkg',
-      VCPKG_OVERLAY_TRIPLETS: '%WORKSPACE%/tools/vcpkg/triplets',
-      // set a custom buildtrees path because the default one is too long and msbuild tasks fail
-      VCPKG_INSTALL_OPTIONS: '--x-buildtrees-root=%WORKSPACE%/vcpkg-buildtrees',
-      VCPKG_TARGET_TRIPLET: triplet,
       REALM_VERSION: gitDescribeVersion,
     ]
 
diff --git a/dependencies.list b/dependencies.list
index aa1cda21bc0..f8bc00be4d9 100644
--- a/dependencies.list
+++ b/dependencies.list
@@ -1,4 +1,5 @@
 PACKAGE_NAME=realm-core
 VERSION=13.1.2
-OPENSSL_VERSION=1.1.1n
+OPENSSL_VERSION=3.0.7
+WIN32_ZLIB_VERSION=1.2.13
 MDBREALM_TEST_SERVER_TAG=2022-10-21
diff --git a/evergreen/build_zlib.sh b/evergreen/build_zlib.sh
deleted file mode 100755
index 20b5d653da6..00000000000
--- a/evergreen/build_zlib.sh
+++ /dev/null
@@ -1,74 +0,0 @@
-#!/bin/bash
-set -o pipefail
-set -o errexit
-set -o xtrace
-
-BASE_PATH=$(cd $(dirname "$0"); pwd)
-source $BASE_PATH/cmake_vars_utils.sh
-
-CMAKE=${CMAKE:=cmake}
-GENERATOR="${GENERATOR:=Unix Makefiles}"
-if [ -n "$CC" ]; then
-    CC="-DCMAKE_C_COMPILER=$CC"
-fi
-
-while getopts 'p:e:b:nj:c:' c
-do
-    case $c in
-        p) PREFIX=$OPTARG ;;
-        e) EXTRA_ARGS=$OPTARG ;;
-        b) BRANCH=$OPTARG ;;
-        n) NO_CLEANUP=true ;;
-        c) BUILD_CONFIG=$OPTARG ;;
-        j) JOBS="-j$OPTARG"
-    esac
-done
-
-if [ -z $PREFIX ]; then
-    echo "Error: must set install prefix"
-    exit 2
-fi
-if [ -z $BRANCH ]; then
-    echo "Error: must set branch of libz to build"
-    exit 2
-fi
-
-if [ "$OS" = "Windows_NT" ]; then
-    PREFIX=$(cygpath -ma $PREFIX)
-elif [ "$(uname -s)" = "Darwin" ]; then
-    PREFIX=$(pwd)/$PREFIX
-else
-    PREFIX=$(realpath $PREFIX)
-fi
-
-BUILD_CONFIG=${BUILD_CONFIG:=Debug}
-SOURCE_DIR=$(mktemp -d libz-XXXXX)
-cleanup() {
-    cd $TOP_DIR
-    rm -rf $SOURCE_DIR
-}
-if [ -n $NO_CLEANUP ]; then
-    trap cleanup EXIT
-    trap cleanup SIGINT
-fi
-
-git clone git@github.com:madler/zlib.git --branch $BRANCH --depth 1 $SOURCE_DIR
-cd $SOURCE_DIR
-
-$CMAKE \
-    -B build \
-    -G "$GENERATOR" \
-    -DCMAKE_BUILD_TYPE="$BUILD_CONFIG" \
-    -DCMAKE_INSTALL_PREFIX="$PREFIX" \
-    -DCMAKE_INSTALL_LIBDIR="lib" \
-    $CC $EXTRA_ARGS
-$CMAKE --build build $JOBS --config "$BUILD_CONFIG"
-$CMAKE --install build --config "$BUILD_CONFIG"
-
-if [ "$OS" = "Windows_NT" ]; then
-    set_cmake_var zlib_vars ZLIB_LIBRARY PATH "$(cygpath -ma $PREFIX/lib/zlibstaticd.lib)"
-    set_cmake_var zlib_vars ZLIB_INCLUDE_DIR PATH "$(cygpath -ma $PREFIX/include)"
-else
-    set_cmake_var zlib_vars ZLIB_LIBRARY PATH $PREFIX/lib/libz.a
-    set_cmake_var zlib_vars ZLIB_INCLUDE_DIR PATH $PREFIX/include
-fi
diff --git a/evergreen/config.yml b/evergreen/config.yml
index dd3de9f52df..1dc65fe2601 100644
--- a/evergreen/config.yml
+++ b/evergreen/config.yml
@@ -59,15 +59,6 @@ functions:
               set_cmake_var compiler_vars CMAKE_CXX_COMPILER PATH $(./evergreen/abspath.sh ${cxx_compiler})
           fi
 
-          if [ -n "${build_zlib|}" ]; then
-              CC="${c_compiler|}" GENERATOR="${cmake_generator|}" \
-                  ./evergreen/build_zlib.sh \
-                      -p zlib_prefix \
-                      -b v1.2.11 \
-                      -e "${extra_flags}" \
-                      -j ${max_jobs|$(grep -c proc /proc/cpuinfo)}
-          fi
-
           if [ -n "${run_tests_against_baas|}" ]; then
               set_cmake_var baas_vars REALM_ENABLE_AUTH_TESTS BOOL On
               set_cmake_var baas_vars REALM_MONGODB_ENDPOINT STRING "http://localhost:9090"
@@ -1017,7 +1008,6 @@ buildvariants:
     extra_flags: "-A x64"
     max_jobs: $(($(grep -c proc /proc/cpuinfo) / 2))
     fetch_missing_dependencies: On
-    build_zlib: On
     python3: "/cygdrive/c/python/python37/python.exe"
   tasks:
   - name: compile_test_and_package
@@ -1033,7 +1023,6 @@ buildvariants:
     extra_flags: "-A x64"
     max_jobs: $(($(grep -c proc /proc/cpuinfo) / 2))
     fetch_missing_dependencies: On
-    build_zlib: On
     python3: "/cygdrive/c/python/python37/python.exe"
     run_with_encryption: On
   tasks:
@@ -1050,7 +1039,6 @@ buildvariants:
     cmake_build_type: "Release"
     max_jobs: $(($(grep -c proc /proc/cpuinfo) / 2))
     fetch_missing_dependencies: On
-    build_zlib: On
     python3: "/cygdrive/c/python/python37/python.exe"
   tasks:
   - name: compile_test
diff --git a/src/realm/sync/noinst/server/crypto_server_openssl.cpp b/src/realm/sync/noinst/server/crypto_server_openssl.cpp
index 2ddb35b83dd..559e11cbe2a 100644
--- a/src/realm/sync/noinst/server/crypto_server_openssl.cpp
+++ b/src/realm/sync/noinst/server/crypto_server_openssl.cpp
@@ -3,7 +3,12 @@
 #include <openssl/bio.h>
 #include <openssl/pem.h>
 #include <openssl/evp.h>
+
+#if OPENSSL_VERSION_MAJOR >= 3
+#include <openssl/decoder.h>
+#else
 #include <openssl/rsa.h>
+#endif
 
 using namespace realm;
 using namespace realm::sync;
@@ -43,6 +48,19 @@ PKey::~PKey() {}
 
 static key_type load_public_from_bio(BIO* bio)
 {
+#if OPENSSL_VERSION_MAJOR >= 3
+    EVP_PKEY* pkey = nullptr;
+    const char* format = "PEM";      /* NULL for any format */
+    const char* structure = nullptr; /* any structure */
+    const char* key_type = "RSA";    /* NULL for any key */
+    auto ctx = as_unique_ptr(OSSL_DECODER_CTX_new_for_pkey(&pkey, format, structure, key_type,
+                                                           OSSL_KEYMGMT_SELECT_PUBLIC_KEY, nullptr, nullptr),
+                             OSSL_DECODER_CTX_free);
+    if (!OSSL_DECODER_from_bio(ctx.get(), bio)) {
+        throw CryptoError{"Error reading RSA key."};
+    }
+    return as_unique_ptr(pkey, EVP_PKEY_free);
+#else
     pem_password_cb* password_cb = nullptr; // OpenSSL will display a prompt if necessary
     void* password_cb_userdata = nullptr;
 
@@ -56,8 +74,8 @@ static key_type load_public_from_bio(BIO* bio)
     if (EVP_PKEY_assign_RSA(key.get(), rsa.get()) == 0)
         throw CryptoError{"Error assigning RSA key."};
     rsa.release();
-
     return key;
+#endif
 }
 
 PKey PKey::load_public(const std::string& pemfile)
diff --git a/src/realm/util/encrypted_file_mapping.cpp b/src/realm/util/encrypted_file_mapping.cpp
index 137b535f0d6..7815e4bfb86 100644
--- a/src/realm/util/encrypted_file_mapping.cpp
+++ b/src/realm/util/encrypted_file_mapping.cpp
@@ -451,6 +451,18 @@ void AESCryptor::calc_hmac(const void* src, size_t len, uint8_t* dst, const uint
     sha_process(s, opad, 64);
     sha_process(s, dst, 28); // 28 == SHA224_DIGEST_LENGTH
     sha_done(s, dst);
+#elif OPENSSL_VERSION_NUMBER >= 0x10101000L // 1.1.1
+    std::unique_ptr<EVP_MD_CTX, void (*)(EVP_MD_CTX*)> ctx = {EVP_MD_CTX_new(), EVP_MD_CTX_free};
+    EVP_DigestInit(ctx.get(), EVP_sha224());
+    EVP_DigestUpdate(ctx.get(), ipad, 64);
+    EVP_DigestUpdate(ctx.get(), static_cast<const uint8_t*>(src), len);
+    EVP_DigestFinal(ctx.get(), dst, nullptr);
+
+    ctx = {EVP_MD_CTX_new(), EVP_MD_CTX_free};
+    EVP_DigestInit(ctx.get(), EVP_sha224());
+    EVP_DigestUpdate(ctx.get(), opad, 64);
+    EVP_DigestUpdate(ctx.get(), dst, SHA224_DIGEST_LENGTH);
+    EVP_DigestFinal(ctx.get(), dst, nullptr);
 #else
     SHA256_CTX ctx;
     SHA224_Init(&ctx);
diff --git a/src/realm/util/network_ssl.cpp b/src/realm/util/network_ssl.cpp
index 20f935b4b5f..a9a07ce3fb3 100644
--- a/src/realm/util/network_ssl.cpp
+++ b/src/realm/util/network_ssl.cpp
@@ -835,6 +835,8 @@ int Stream::bio_puts(BIO* bio, const char* c_str) noexcept
 long Stream::bio_ctrl(BIO*, int cmd, long, void*) noexcept
 {
     switch (cmd) {
+        case BIO_CTRL_EOF:
+            return 0;
         case BIO_CTRL_PUSH:
         case BIO_CTRL_POP:
             // Ignoring in alignment with `crypto/bio/bss_sock.c` of OpenSSL.
@@ -842,8 +844,9 @@ long Stream::bio_ctrl(BIO*, int cmd, long, void*) noexcept
         case BIO_CTRL_FLUSH:
             // Ignoring in alignment with `crypto/bio/bss_sock.c` of OpenSSL.
             return 1;
+        default:
+            REALM_ASSERT_EX(false, "Got BIO_ctrl with unknown command %d", cmd);
     }
-    REALM_ASSERT(false);
     return 0;
 }
 
diff --git a/tools/cmake/AcquireRealmDependency.cmake b/tools/cmake/AcquireRealmDependency.cmake
new file mode 100644
index 00000000000..b37cf658c62
--- /dev/null
+++ b/tools/cmake/AcquireRealmDependency.cmake
@@ -0,0 +1,49 @@
+function(realm_acquire_dependency dep_name dep_version out_dep_cmake)
+    set(_target_architecture_Android_armeabi-v7a arm)
+    set(_target_architecture_Android_arm64-v8a arm64)
+    set(_target_architecture_Android_x86 x86)
+    set(_target_architecture_Android_x86_64 x64)
+    set(_target_architecture_Windows_Win32 x86)
+    set(_target_architecture_Windows_x64 x64)
+    set(_target_architecture_Windows_ARM64 arm64)
+    set(_target_architecture_WindowsStore_Win32 x86)
+    set(_target_architecture_WindowsStore_x64 x64)
+    set(_target_architecture_WindowsStore_ARM arm)
+    set(_target_architecture_WindowsStore_ARM64 arm64)
+    set(_target_architecture_Linux_x86_64 x64)
+    set(_target_architecture_Linux_arm arm)
+    set(_target_architecture_Linux_armv7 arm)
+    set(_target_architecture_Linux_armv7l arm)
+    set(_target_architecture_Linux_aarch64 arm64)
+    set(_target_platform_name_Android android)
+    set(_target_platform_name_Windows windows-static)
+    set(_target_platform_name_WindowsStore uwp-static)
+    set(_target_platform_name_Linux linux-gnu)
+
+    if(ANDROID)
+        set(_target_architecture ${CMAKE_ANDROID_ARCH_ABI})
+    elseif(WIN32 AND CMAKE_GENERATOR MATCHES "^Visual Studio")
+        set(_target_architecture ${CMAKE_GENERATOR_PLATFORM})
+    else()
+        set(_target_architecture ${CMAKE_SYSTEM_PROCESSOR})
+    endif()
+
+    if(NOT EXISTS ${CMAKE_CURRENT_BINARY_DIR}/${dep_name}/include.cmake)
+        set(DEP_URL "https://static.realm.io/downloads/dependencies/${dep_name}/${dep_version}/${dep_name}-${dep_version}-${_target_architecture_${CMAKE_SYSTEM_NAME}_${_target_architecture}}-${_target_platform_name_${CMAKE_SYSTEM_NAME}}.tar.gz")
+        message(STATUS "Getting ${DEP_URL}...")
+        file(DOWNLOAD "${DEP_URL}" "${CMAKE_CURRENT_BINARY_DIR}/${dep_name}/${dep_name}.tar.gz" STATUS download_status)
+
+        list(GET download_status 0 status_code)
+        if (NOT "${status_code}" STREQUAL "0")
+            message(FATAL_ERROR "Downloading ${url}... Failed. Status: ${download_status}")
+        endif()
+
+        message(STATUS "Uncompressing ${dep_name}...")
+        execute_process(
+            COMMAND ${CMAKE_COMMAND} -E tar xfz "${dep_name}.tar.gz"
+            WORKING_DIRECTORY "${CMAKE_CURRENT_BINARY_DIR}/${dep_name}"
+        )
+    endif()
+
+    set(${out_dep_cmake} ${CMAKE_CURRENT_BINARY_DIR}/${dep_name}/include.cmake PARENT_SCOPE)
+endfunction()
diff --git a/tools/cmake/RealmConfig.cmake.in b/tools/cmake/RealmConfig.cmake.in
index 2833b43ca91..4b9d0da2a7f 100644
--- a/tools/cmake/RealmConfig.cmake.in
+++ b/tools/cmake/RealmConfig.cmake.in
@@ -1,55 +1,19 @@
 include("${CMAKE_CURRENT_LIST_DIR}/RealmTargets.cmake")
+include("${CMAKE_CURRENT_LIST_DIR}/AcquireRealmDependency.cmake")
 
 # Find dependencies
 include(CMakeFindDependencyMacro)
 
-set(REALM_FORCE_OPENSSL @REALM_HAVE_OPENSSL@)
-if(REALM_FORCE_OPENSSL)
-    if(VCPKG_TOOLCHAIN)
-        # If we're building with vcpkg, prefer to find OpenSSL there first
-        if(Realm_FIND_QUIETLY)
-            set(_quiet_arg QUIET)
-        endif()
-        find_package(OpenSSL @OPENSSL_VERSION_MAJOR_MINOR@ ${_quiet_arg})
-    endif()
-    # We aren't building with vcpkg, or it didn't have OpenSSL
-    if(NOT OpenSSL_FOUND)
-        if(ANDROID OR (CMAKE_SYSTEM_NAME STREQUAL "Linux" AND CMAKE_SYSTEM_PROCESSOR STREQUAL "x86_64"))
-            # We have prebuilt OpenSSL tarballs for Android and Linux x86_64
-            set(_realm_have_prebuilt_openssl ON)
-        endif()
-        if(NOT REALM_USE_SYSTEM_OPENSSL AND _realm_have_prebuilt_openssl)
-            # Use our own prebuilt OpenSSL
-            if(NOT OpenSSL_DIR)
-                if(NOT EXISTS ${CMAKE_BINARY_DIR}/openssl/lib/cmake/OpenSSL/OpenSSLConfig.cmake)
-                    if(ANDROID)
-                        set(OPENSSL_URL "http://static.realm.io/downloads/openssl/@OPENSSL_VERSION@/Android/${CMAKE_ANDROID_ARCH_ABI}/openssl.tar.gz")
-                    else()
-                        set(OPENSSL_URL "http://static.realm.io/downloads/openssl/@OPENSSL_VERSION@/Linux/x86_64/openssl.tar.gz")
-                    endif()
-
-                    message(STATUS "Getting ${OPENSSL_URL}...")
-                    file(DOWNLOAD "${OPENSSL_URL}" "${CMAKE_BINARY_DIR}/openssl/openssl.tar.gz" STATUS download_status)
-
-                    list(GET download_status 0 status_code)
-                    if (NOT "${status_code}" STREQUAL "0")
-                        message(FATAL_ERROR "Downloading ${OPENSSL_URL}... Failed. Status: ${download_status}")
-                    endif()
-                    message(STATUS "Uncompressing OpenSSL...")
-                    execute_process(
-                        COMMAND ${CMAKE_COMMAND} -E tar xfz "openssl.tar.gz"
-                        WORKING_DIRECTORY "${CMAKE_BINARY_DIR}/openssl"
-                    )
-                endif()
+if(@REALM_HAVE_OPENSSL@)
+    if(NOT REALM_USE_SYSTEM_OPENSSL AND (ANDROID OR WIN32 OR CMAKE_SYSTEM_NAME STREQUAL "Linux"))
+        # Use our own prebuilt OpenSSL
+        realm_acquire_dependency(openssl @OPENSSL_VERSION@ OPENSSL_CMAKE_INCLUDE_FILE)
 
-                set(OpenSSL_DIR "${CMAKE_BINARY_DIR}/openssl/lib/cmake/OpenSSL")
-            endif()
-            find_package(OpenSSL REQUIRED CONFIG)
-            target_link_libraries(OpenSSL::SSL INTERFACE OpenSSL::Crypto)
-        else()
-            find_dependency(OpenSSL @OPENSSL_VERSION_MAJOR_MINOR@)
-        endif()
+        include(${OPENSSL_CMAKE_INCLUDE_FILE})
     endif()
+
+    set(OPENSSL_USE_STATIC_LIBS ON)
+    find_dependency(OpenSSL @OPENSSL_VERSION@)
 endif()
 
 set(THREADS_PREFER_PTHREAD_FLAG ON)
@@ -60,5 +24,19 @@ find_dependency(Threads)
 # so for an iOS build it'll use the path from the Device plaform, which is an error on Simulator.
 # Just use -lz and let Xcode figure it out
 if(TARGET Realm::Sync AND NOT APPLE AND NOT TARGET ZLIB::ZLIB)
+    if(WIN32)
+        realm_acquire_dependency(zlib @DEP_WIN32_ZLIB_VERSION@ ZLIB_CMAKE_INCLUDE_FILE)
+        include(${ZLIB_CMAKE_INCLUDE_FILE})
+    elseif(ANDROID)
+        # On Android FindZLIB chooses the static libz over the dynamic one, but this leads to issues
+        # (see https://github.com/android/ndk/issues/1179)
+        # We want to link against the stub library instead of statically linking anyway,
+        # so we hack find_library to only consider shared object libraries when looking for libz
+        set(_CMAKE_FIND_LIBRARY_SUFFIXES_orig ${CMAKE_FIND_LIBRARY_SUFFIXES})
+        set(CMAKE_FIND_LIBRARY_SUFFIXES .so)
+    endif()
     find_dependency(ZLIB)
+    if(ANDROID)
+        set(CMAKE_FIND_LIBRARY_SUFFIXES ${_CMAKE_FIND_LIBRARY_SUFFIXES_orig})
+    endif()
 endif()
\ No newline at end of file
diff --git a/tools/vcpkg/ports b/tools/vcpkg/ports
deleted file mode 160000
index acc3bcf76b8..00000000000
--- a/tools/vcpkg/ports
+++ /dev/null
@@ -1 +0,0 @@
-Subproject commit acc3bcf76b84ae5041c86ab55fe138ae7b8255c7
diff --git a/tools/vcpkg/triplets/arm-uwp-static.cmake b/tools/vcpkg/triplets/arm-uwp-static.cmake
deleted file mode 100644
index c305c8a4815..00000000000
--- a/tools/vcpkg/triplets/arm-uwp-static.cmake
+++ /dev/null
@@ -1,6 +0,0 @@
-set(VCPKG_TARGET_ARCHITECTURE arm)
-set(VCPKG_CRT_LINKAGE dynamic)
-set(VCPKG_LIBRARY_LINKAGE static)
-
-set(VCPKG_CMAKE_SYSTEM_NAME WindowsStore)
-set(VCPKG_CMAKE_SYSTEM_VERSION 10.0)
diff --git a/tools/vcpkg/triplets/arm64-uwp-static.cmake b/tools/vcpkg/triplets/arm64-uwp-static.cmake
deleted file mode 100644
index e7322b759a4..00000000000
--- a/tools/vcpkg/triplets/arm64-uwp-static.cmake
+++ /dev/null
@@ -1,6 +0,0 @@
-set(VCPKG_TARGET_ARCHITECTURE arm64)
-set(VCPKG_CRT_LINKAGE dynamic)
-set(VCPKG_LIBRARY_LINKAGE static)
-
-set(VCPKG_CMAKE_SYSTEM_NAME WindowsStore)
-set(VCPKG_CMAKE_SYSTEM_VERSION 10.0)
diff --git a/tools/vcpkg/triplets/x64-uwp-static.cmake b/tools/vcpkg/triplets/x64-uwp-static.cmake
deleted file mode 100644
index dea649ef5de..00000000000
--- a/tools/vcpkg/triplets/x64-uwp-static.cmake
+++ /dev/null
@@ -1,6 +0,0 @@
-set(VCPKG_TARGET_ARCHITECTURE x64)
-set(VCPKG_CRT_LINKAGE dynamic)
-set(VCPKG_LIBRARY_LINKAGE static)
-
-set(VCPKG_CMAKE_SYSTEM_NAME WindowsStore)
-set(VCPKG_CMAKE_SYSTEM_VERSION 10.0)
diff --git a/tools/vcpkg/triplets/x86-uwp-static.cmake b/tools/vcpkg/triplets/x86-uwp-static.cmake
deleted file mode 100644
index abff8676151..00000000000
--- a/tools/vcpkg/triplets/x86-uwp-static.cmake
+++ /dev/null
@@ -1,6 +0,0 @@
-set(VCPKG_TARGET_ARCHITECTURE x86)
-set(VCPKG_CRT_LINKAGE dynamic)
-set(VCPKG_LIBRARY_LINKAGE static)
-
-set(VCPKG_CMAKE_SYSTEM_NAME WindowsStore)
-set(VCPKG_CMAKE_SYSTEM_VERSION 10.0)
diff --git a/tools/vcpkg/vcpkg.json b/tools/vcpkg/vcpkg.json
deleted file mode 100644
index f4fb0b561ed..00000000000
--- a/tools/vcpkg/vcpkg.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-    "dependencies": [
-        {
-            "name": "openssl",
-            "platform": "android | linux | windows"
-        },
-        {
-            "name": "zlib",
-            "platform": "windows"
-        }
-    ],
-    "features": {
-        "tests": {
-            "description": "Build tests",
-            "dependencies": [
-                "libuv"
-            ]
-        }
-    },
-    "overrides": [
-        {
-            "name": "openssl",
-            "version-string": "1.1.1n"
-        }
-    ],
-    "builtin-baseline": "acc3bcf76b84ae5041c86ab55fe138ae7b8255c7"
-}