use embedded ca file to fix ssl errors