ssl tls config and a workaround