Ok, turns out I have no idea how to get ECDHE out of OpenSSL or more concretely: I have no idea why I’m getting it all the time. Mea culpa.