update SSL/TLS config from a reliable source