document why tls handshake fails