allow multiple versions instead of only forcing sslv3

This introduces a new ssl parameter: :min_version, which can be
:sslv2 (any), :sslv3 (no SSLv2), or :tlsv1 (forces tlsv1).