GnuTLS, OpenSSL support for TLS1.1, 1.2

[Vivek Dasmohapatra]

> That's not unusual.  Check the GnuTLS manual on how to make GnuTLS just
> talk TLS 1.0 if you can't fix that server.

I did, I mention it only as background here.

>> (analysed with ssltap from libnss3 - is there an equivalent from
>> GnuTLS, btw?):
>
> There is gnutls-cli, but I don't know how it compares.

ssltap lets you be an (obvious) man-in-the-middle and dumps out 
information about the ssl protocol - it listens on a port and interface
you specify and proxies to the real server you want your client to
talk to. Can be quite handy.