Please see https://rt.openssl.org/Ticket/Display.html?id=3439 Your symptoms match, so it looks like unfortunately you were relying on an OpenSSL bug to get the desired application behaviour.