allow ssl on BO