otherwise it probably uses system's openssl. Setting rpath seems not needed because we are using -DBUILD_SHARED_LIBS=OFF here.