switch to string for tls-min-version; default to 1.0 and max 1.2