don't try to process a buf when ssl has returned -1, just let it try again later