tls: enforce certificate verification