John McKay added the comment:
For the test can I assume that we have the openssl binary in the path? The
other tests just use a static response to emulate the server, but without being
able to use s_client it would be quite a bit more effort to fake a working HTTP
server with TLS so
New submission from John McKay:
After getting a sucessfull response, _open_generic_http will overwrite the the
start of the url to be http: regardless of if it was called from open_http() or
open_https(). This causes it to appear as if you were redirected to a
non-secure site if you check
