openssl: force TLS v1.2 instead of v1