MEDIUM: ssl: convert CBS (BoringSSL api) usage to neutral code

switchctx early callback is only supported for BoringSSL. To prepare
the support of openssl 1.1.1 early callback, convert CBS api to neutral
code to work with any ssl libs.
1 file changed