openssl: there can only be one