Disable DTLS on broken clients

openconnect clients using gnutls 3.6.3 to 3.6.12 send an incorrect random value. We should protect those clients by refusing DTLS negotiation when the random value is zero.

gnutls/gnutls#960 (closed)