default option for openssl