I'm wondering if what this pull request does really works. It seems to generate a fixed key for each curve and then uses these for each request. My understanding was that for forward security this key needs to be newly generated for each request. I could be wrong on this and the documentation on `SSL_CTX_set_tmp_ecdh_callback` is non-existent. The way I have implemented it is the same way as nginx and apache.