Switch to capability checks for blacklist checking instead of version;
Fix some code style
use TLSv1.x
add changelog