Return APR_EAGAIN instead of SSL_ERROR_WANT_READ from the mod_ssl filters; the httpd core and other modules' filters don't know what SSL_ERROR_* means.