re #4 - use (cffi:null-pointer) instead of 0 in call to ssl-ctx-ctrl