Add -no_resumption_on_reneg to SSL_CONF.