openssl is optional