make openssl optional