only try extracting if extract is enabled. Fixes #523
Don't verify ssl. Fixes #524
make sure os.devnull is opened as writable.