client side TLS support