patch ssl separately