some ssl settings leaked out of their if block