(PE-3483) Use CA lib for SSL, instead of KS