client-side support for SSL