OpenSSL 1.1 backend does not respect fixed (single) protocol configurations

While 'ranged' versions (like QSsl::TlsV1_0OrLater, etc) work OK (due to the fact we use a generic client/server method + SSL_CTX_set_options to disable protocols at the lower edge), single-protocol configurations (e.g. QSsl::TlsV1_0) act as they have upper bound open (thus 'or later' versions all could be negotiated). Minor issue, but results in some tests failing + broken compatibility/promise.

Edit: actually not so simple - not so minor.