some clang format runs
first parts of the new ssl interface

Internally now using boost::variant to distinguish between files and
buffers