crypto: check protocol version at handshake header