fix oracle check to support instance_name and sid
If the SSL verify peer fails *before* our custom callback, be clear and cheap.