more openssl verification fixes