after upgrading 2.2.17->2.3.1 TLS not working

[Maxim Lougovsky]

Hi

After after upgrading 2.2.17->2.3.1 TLS not working, options for new 
package

Options        :
        ANON           : off
        BDB            : off
        CYRUS          : off
        DEBUG          : on
        DOCS           : on
        EXPERIMENTAL   : off
        FS             : off
        GSASL          : on
        LDAP           : off
        MYSQL          : on
        PAM            : off
        PGSQL          : off
        PIPE           : off
        REQUIRES       : off
        SQLITE         : off
        SUPERSEDED     : off
i am using FreeBSD package.

Server just not show "starttls" in stream:features during XMPP client 
connection:

<compression xmlns="http://jabber.org/features/compress";>
<method>zlib</method>
</compression>
<address 
xmlns="http://affinix.com/jabber/address";>91.103.66.203</address>
<mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl">
<mechanism>PLAIN</mechanism>
<mechanism>DIGEST-MD5</mechanism>
</mechanisms>
<auth xmlns="http://jabber.org/features/iq-auth"/>
</stream:features>

but debug log shown that cert is OK and it load it:

S2S : sx (ssl.c:1000) ssl context '*' initialised; certificate and key 
loaded from /usr/local/etc/jabberd/server.pem

also i see in debug logs:

SM  : sx (io.c:240) decoded read data (233 bytes): <stream:features 
xmlns:stream='http://etherx.jabber.org/streams'><starttls 
xmlns='urn:ietf:params:xml:ns:xmpp-tls'/><mechanisms 
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><mechanism>DIGEST-MD5</mechanism></mechanisms></stream:features>

but XMPP client still cannot connect via TLS
any ideas?