TLS: fix resumption for TLS-on-connect