Initial bits of BIO callback, improve msg for self-signed cert errors