'Create a new client-side SSL :py:obj:`Connection` object wrapped around
:py:obj:`sock`.'

def _client(self, sock):

    client_ctx = Context(TLSv1_METHOD)
    client_ctx.set_options(((OP_NO_SSLv2 | OP_NO_SSLv3) | OP_SINGLE_DH_USE))
    client_ctx.set_verify(((VERIFY_PEER | VERIFY_FAIL_IF_NO_PEER_CERT) | VERIFY_CLIENT_ONCE), verify_cb)
    client_store = client_ctx.get_cert_store()
    client_ctx.use_privatekey(load_privatekey(FILETYPE_PEM, client_key_pem))
    client_ctx.use_certificate(load_certificate(FILETYPE_PEM, client_cert_pem))
    client_ctx.check_privatekey()
    client_store.add_cert(load_certificate(FILETYPE_PEM, root_cert_pem))
    client_conn = Connection(client_ctx, sock)
    client_conn.set_connect_state()
    return client_conn
