[fix] default strictSSL to false