set minimum SSL version to prevent hitting BZ1022017