use SSL_kDHE throughout instead of SSL_kEDH