When using TLS with netvirt the OVSDB manager is set on the switch with ssl prefix.  After that netvirt will attempt to create br-int bridge and set it's OpenFlow controller to point to ODL.  However, it does not correctly detect that SSL is used for the OVSDB manager and ends up using TCP.