tls-server: Select cipher suite also when handling HelloRetryRequest