On Mac, use BouncyCastle SSL provider to avoid a 1024-bit key size restriction