How to resolve inconsistent linking of path-specified openssl libs into php bin and extenstions ?

I'm working on php 7-1 with specific openssl versions/install paths. When building with openssl ext, linking openssl 10 libs/headers from a local, non-system path, and rpath'ing enabled export EXTRA_LDFLAGS="-L/usr/local/openssl10/lib64" export EXTRA_LIBS="-lssl -lscrypto" CPPFLAGS="-I/usr/local/openssl10/include -I/usr/local/include -I/usr/include" pkg-config openssl --libs --cflags -I/usr/local/openssl10/include -L/usr/local/openssl10/lib64 -lssl -lcrypto ./configure \ --enable-rpath \ --enable-shared=yes --enable-static=no \ --with-openssl=shared --with-openssl-dir=/usr/local/openssl10 \ ... make make install correctly links the openssl.so to spec'd openssl libs ldd openssl.so linux-vdso.so.1 (0x00007fffdedef000) !! libssl.so.1.0.0 => /usr/local/openssl10/lib64/libssl.so.1.0.0 (0x00007fdae69f5000) !! libcrypto.so.1.0.0 => /usr/local/openssl10/lib64/libcrypto.so.1.0.0 (0x00007fdae6565000) libc.so.6 => /lib64/libc.so.6 (0x00007fdae6162000) libdl.so.2 => /lib64/libdl.so.2 (0x00007fdae5f5e000) /lib64/ld-linux-x86-64.so.2 (0x0000556f88705000) but php -i returns a mismatch ... OpenSSL support => enabled OpenSSL Library Version => OpenSSL 1.0.2j-fips 26 Sep 2016 OpenSSL Header Version => OpenSSL 1.0.2k 26 Jan 2017 Openssl default config => /etc/ssl/openssl.cnf Directive => Local Value => Master Value openssl.cafile => no value => no value openssl.capath => /etc/ssl/certs => /etc/ssl/certs ... checking ldd which php linux-vdso.so.1 (0x00007ffe796a7000) libcrypt.so.1 => /lib64/libcrypt.so.1 (0x00007fe781930000) libresolv.so.2 => /lib64/libresolv.so.2 (0x00007fe781718000) libstdc++.so.6 => /usr/lib64/libstdc++.so.6 (0x00007fe78132f000) libpcre.so.1 => /usr/local/lib64/libpcre.so.1 (0x00007fe7810b5000) librt.so.1 => /lib64/librt.so.1 (0x00007fe780eac000) libm.so.6 => /lib64/libm.so.6 (0x00007fe780baf000) libdl.so.2 => /lib64/libdl.so.2 (0x00007fe7809ab000) libnsl.so.1 => /lib64/libnsl.so.1 (0x00007fe780792000) libz.so.1 => /lib64/libz.so.1 (0x00007fe78057b000) liblzma.so.5 => /usr/lib64/liblzma.so.5 (0x00007fe780352000) libxml2.so.2 => /usr/lib64/libxml2.so.2 (0x00007fe77ffe6000) !! libssl.so.1.0.0 => /lib64/libssl.so.1.0.0 (0x00007fe77fd7a000) !! libcrypto.so.1.0.0 => /lib64/libcrypto.so.1.0.0 (0x00007fe77f920000) libc.so.6 => /lib64/libc.so.6 (0x00007fe77f57c000) /lib64/ld-linux-x86-64.so.2 (0x0000560dbbe7d000) libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x00007fe77f365000) libpthread.so.0 => /lib64/libpthread.so.0 (0x00007fe77f148000) the php binary itself is incorrectly linked to system/distro, not specified libs. If I instead set export LDFLAGS="-L/usr/local/openssl10/lib64" export LIBS="-lssl -lscrypto" then (1) the mismatch persists AND (2) EVERY ext.so built is linked to incorrect libs ldd <any_ext>.so ... libssl.so.1.0.0 => /lib64/libssl.so.1.0.0 (0x00007f29accae000) libcrypto.so.1.0.0 => /lib64/libcrypto.so.1.0.0 (0x00007f29ac854000) ... What combination of setting/flags are required to (1) correctly link/rpath SPECIFIED openssl libs (2) ensure matched headers & libs are detected & reported (3) link ssl/crypto libs ONLY to bins/libs that *require* them ?