set CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER to false