thank you for encouragement. #nostr is truly something else.

the problem was that in my cfg files (naturally copied from git)

one server section had ssl_prefer_server_ciphers "on" and the other "off"

when I switched both "on" (which sounded more secure) everything works jus fine (at least as far as I can see)