add option to force to use TLS 1.0