openssl: more fixes