change order of nss/openssl (compatibility)