Set ssl.peername context or name verification will try to use the proxy server name