set ciphers to NULL before calling cert_cb