Currently, negotiation is done in the accepting thread, this is Bad. In the s2n branch I implemented 'opportunistic negotiation' with a boolean, the same thing probably needs to be done with openssl.