Rebranch bug 25550 from stable
Fail in a more comprehensible way if there is SSL but no peer cert.
Since we're here...
Merge bug 25550
stable to default