lazy get SSL state from socket