I’m not sure exactly what’s going on with the openssl handshake here, but can you confirm that you’re able to send traffic between the client and server successfully? Other ways to check that the connection is encrypted include using the linkerd edges command (which lists the encryption status of each edge) or attempting to read data off the connection directly with a packet capture.