allow openssl package to be defined elsewhere