allow specification of SSL version, only allow TLS1.0+ by default