fix embarrassing bug: unpack downloaded openssl, not from parent dir