fixed ssl flaw