fix #427, tolerate servers that reject connections without SNI