ssl: add SNI server support