better ssl config