fix ssl verification for client, too