Use SSL_STARTTLS in the client to explicitly control the handshake