state: use SSL3 prf for TLS1.0/TLS1.1