explicitly set openssl verification to none