use SSL_kECDHE throughout instead of SSL_kEECDH