K 10
svn:author
V 3
des
K 8
svn:date
V 27
2014-10-15T07:35:50.662471Z
K 7
svn:log
V 382
As pointed out by several people, r273114 was incorrect: it unconditionally
disabled everything except TLS 1.0.  Replace it with a more carefully
wrought patch:

 - Switch the default for SSLv3 from on to off
 - Add environment variables to control TLS 1.1 and 1.2
 - In verbose mode, report which version is used
 - Update the man page to reflect these changes.

MFC after:	1 week

END