tls session: fix unlisten