Fix "locked" tunnel problem.  Add work-around for bad server ssl certificate