I think your analysis is correct.
You are dealing with code that works "most of time", but "not all of time".

The SSL calculations take time, but "that is not that much time". Certainly not 30 minutes! We are actually talking milliseconds (even on a very slow computer - like mine!) for all of the calculations.

The basic design appears to be flawed.