replace openssl with single command