Ted,

I had similar issue recently and found out that the NGINX patch for DTLS doesn't seem to support PSK. Depending on the client cipher negociation at handshake time you might or might not encounter "no shared cipher". If you can, you should force your client to use an "SSL" cipher supported by nginx (and not a PSK one).

Regards
Sekine