The SSL engine is notoriously difficult.