implement AllowCertificateError

Fix #1103: Ssl certificate errors should
report error immediately, not time out