Add support for setting allowed cns for passive mode.

Fixes #257: When using passive mode and TLS using NAT the verify peer mode will fail.