client allow user callback to close on nonzero return

Signed-off-by: Andy Green <andy.green@linaro.org>
ssl client use OS CA root certs by default

Signed-off-by: Andy Green <andy.green@linaro.org>