library to hide awful SSL API in a sane interface