SSL full -> flexible