register explicit dependency

(even as we have a good-enough openssl in base)