Although I have no way of testing how long the server side (SSL_accept())
might delay when the client is not responding to handshake records,
I decided to make the timeout for the server the same as the client.