The SSL parameter in the driver configuration is for SSL between the Active Directory driver and Active Directory. It isn’t for SSL between the Metadirectory engine and the Remote Loader. See Encryption.