proxy: SSL version is 0-based not 1-based, set_version(2) for version 3!