do not force SSLv3