BUGFIX: use TLSv1 instead of SSLv3