add support for legacy SSL