I'm sorry, I've noticed that I have a typo in my comment.
It should read:
/*The TLS ulp is currently supported only for TCP sockets
* in ESTABLISHED state.
* Supporting sockets in LISTEN state will require us
* to modify the accept implementation to clone rather then
* share the ulp context.
*/
Should I resubmit the patch?