revised ssl settings -- last commit didn't work unless validation was turned off or client certificates were  used