use ssl_version rather than protocol