polarssl: backport of r35525