In struct tls_connection * tls_connection_init(void *ssl_ctx) { ... }, there is:
options = SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 | SSL_OP_SINGLE_DH_USE;
When I was grepping away through the source, it was this that made me
think it wasn't needed.
Nick