disable SSL3, enable certificate verification by default