style
work on DHE_RSA for client, not yet finished