use TLSv1 instead of SSLv3