Use SSL_set_accept_state instead of SSL_accept to avoid blocking on
handshake, otherwise a DOS attack is trivial.
The handshake will be done transparently by SSL_read.