> Maybe it is because I use the cipher > suite TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA which might not be > supported...
I think your use of tlsclient is correct. However, the ECDHE key agreement protocol is not currently supported by Plan 9's libsec. Could you enable the TLS_RSA_WITH_AES_256_CBC_SHA cipher on your server side? This cipher is supported on Plan 9. -- David du Colombier