key-ex: call SSL_accept() to finish up key-ex