a fix from nginx for SNI client authentication