FreeBSD hasn't updated to 1.1.1b yet. 1.1.1a has a bug such that it can't make our C2S and S2C keys. It works if we downgrade to TLS1.2 I've hacked the code to do that automagically. (I also fixed the error handler for that case - 2 places.) -- These are my opinions. I hate spam.