more tolerant SSL negotiation; error handling