anchor.diff:          | TLS.Fatal ad -> closed <- true; raise (IOException(sprintf "TLS-HS: Received fatal alert: %A" ad))
           | TLS.Warning (conn,ad) -> closed <- true; raise (IOException(sprintf "TLS-HS: Received warning alert: %A" ad))
           | TLS.CertQuery (conn,q,advice) ->
  -            if advice then
  +            if certQuery q advice then
                   match TLS.authorize conn q with
                   | TLS.ReadError (adOpt,err) ->
                       closed <- true
  
positive.code:     | TLSClient
      | TLSServer
  
  type TLStream (s:System.IO.Stream, options, b, ?own, ?sessionID) =
      inherit Stream()
  
      let own = defaultArg own true
  
      let mutable inbuf   : bytes = empty_bytes
      let mutable outbuf  : bytes = empty_bytes
  
negative.code:         | TLS.Fatal ad -> closed <- true; raise (IOException(sprintf "TLS-HS: Received fatal alert: %A" ad))
          | TLS.Warning (conn,ad) -> closed <- true; raise (IOException(sprintf "TLS-HS: Received warning alert: %A" ad))
          | TLS.CertQuery (conn,q,advice) ->
              if certQuery q advice then
                  match TLS.authorize conn q with
                  | TLS.ReadError (adOpt,err) ->
                      closed <- true
  