use ssl.PROTOCOL_SSLv23 for maximum compatibility (closes #20896)