This is typically not seen, as most use cases will have a read listener that is invoked when the read comes in. And that read listener will likely invoke getRead() which will finish the ssl future.
However if no read listener is set, or the read listener does not invoke getRead(), the SSL future wont currently complete. Currently this is because we handle the ssl handshake as we decrypt the read.