use wrapper for openssl