tls: refactor tls_server_hello()