One accepted socket, already past the TLS handshake setup when the listener is TLS.
Reads up to length bytes; -1 at the end of the stream, on an error or on a timeout.