got ssl v2 wrong
rework and cleanup version parsing. SSLv2 records are completely different
(16bit len, 8bit content, 16bit version), thus do not even try to parse it.

also, no dummy for future versions.
Handle unknown versions more gracefully (assume the other
side wants to speak a higher version)
after re-reading the RFC5246, accept all (3, _) versions
check for suitable size for each TLS record
hook SHA256 support (to verify certificate of github.com)
remove XXX after cross-validation with other implementations
pad client_hello with draft-agl-tls-padding if >=256 <=511 bytes

addresses #4
support SHA-384 in certificates, fixes #53
somehow this slipped through some time ago... clearly state that this is our code, not mine.
reformat
client support for DHE in TLS-1.2 (yes, I'll refactor this code later!)

fixes #54
Merge pull request #52 from mirleft/version-fix

more version fixes