working through ca/openssl issues