Backport TLS v1.1 support from HEAD, ssl/ changes