merge r1243246 from trunk: Fix regression introduced in r1222917: in ssl_find_vhost(), we must use the *new* SSL_CTX settings for the SSL_set_options/SSL_set_verify calls.