ssl3_get_client_hello: rearrange logic