openssl: add option to disable Tls v1.1 and v1.2

Because you may not be able to talk to a Java 7 server which has
this bug:

http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=7031830