must set client mode before applying ssl params