Some further ugliness. Work around the fact that CyaSSL does not have DTLSv1_listen (=> bit less DoS resistant, tough), SSL_{get,set}_ex_data is broken in CyaSSL, and the psk-only mode still tries to use certificates unless you manually set cipher suites.