you must give the option of using optional ssl.