mbedtls: enable DHE-RSA key exchange