- fixed fallback to P256 curve - added option to configure minimal TLS version - added option to include insecure cipher suites