Add support for negotiating TLSv1_1 or TLSv1_2