Implement a fix for 5.6-stable:

fix for the SSL session reuse vulnerability (CVE-2014-3616)
ok jasper@

"sure, go ahead" natano@