s_client, s_server: do generic SSL configuration first, specialization after