Force TLS to use AES256 + SHA