Shouldn't you be calling connectToHostEncrypted() on the client if the server starts encryption immediately after receiving the connection?