use openssl again, maybe fixed