DOH! Forgot the SSL_connect() call for client sockets.

Works now, with TLS & test certificates.