support turning off strictSSL