(TK-96) default ssl protocols

This PR changes the default SSL protocols to be TLSv1, TLSv1.1, and TLSv1.2.

Probably easiest to review by commit; the first commit has all the real changes, the other two are just cleanups.
This could probably use a line break in the middle