only try extracting if extract is enabled. Fixes #523
Don't verify ssl. Fixes #524