set SSL_OP_ALL ("various bug workarounds that should be rather harmless")