GnuTLS: fix for clients offering no TLS extensions