SSL_CTRL_GET_NEGOTIATED_GROUP
SSL_ctrl(s, SSL_CTRL_GET_NEGOTIATED_GROUP, 0, NULL)
case SSL_CTRL_GET_NEGOTIATED_GROUP: {