'Create a new server-side SSL :py:obj:`Connection` object wrapped around
:py:obj:`sock`.'

def _server(self, sock):

    server_ctx = Context(TLSv1_METHOD)
    server_ctx.set_options(((OP_NO_SSLv2 | OP_NO_SSLv3) | OP_SINGLE_DH_USE))
    server_ctx.set_verify(((VERIFY_PEER | VERIFY_FAIL_IF_NO_PEER_CERT) | VERIFY_CLIENT_ONCE), verify_cb)
    server_store = server_ctx.get_cert_store()
    server_ctx.use_privatekey(load_privatekey(FILETYPE_PEM, server_key_pem))
    server_ctx.use_certificate(load_certificate(FILETYPE_PEM, server_cert_pem))
    server_ctx.check_privatekey()
    server_store.add_cert(load_certificate(FILETYPE_PEM, root_cert_pem))
    server_conn = Connection(server_ctx, sock)
    server_conn.set_accept_state()
    return server_conn
