fixed ssl mode selection