use an OpenSSL commit that's known to work