We were not remembering the allocated SSL thing in the Sockbuf.

Set flags without relying on errno (this change may be gratuitous
or wrong).