requires openssl zlib crt