cyassl: add a patch to better check legacy SSLv2 client hello records