TLS_SSL_NEEDS_SHUTDOWN
if (ctx->state & TLS_SSL_NEEDS_SHUTDOWN) {
ctx->state &= ~TLS_SSL_NEEDS_SHUTDOWN;
ctx->state |= TLS_SSL_NEEDS_SHUTDOWN;