initial work on ssl proxy