ssl: async key exchange support