tls update for socket upgrades