haproxy: fix OCSP behaviour and client timeouts

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>