Merge pull request #1983 from glyph/correct-structs

put the 'version' field into the 'SSL' struct where it belongs; make SSL_CTX opaque.