compatibility with older OpenSSL