more ssl tweaks