QSslSocket::protocol() should return the protocol version used for the handshake. Instead, it returns the protocol version where the negotiated cipher has been specified (e.g. SSLv2, SSLv3, TLS 1.2).

The correct version can be retrieved from OpenSSL using const char* SSL_get_version(const SSL ) (*not SSL_CIPHER_get_version(...)), and is one of "TLSv1.2", "TLSv1.1", "TLSv1", "SSLv3" or "SSLv2". This value can (only) be retrieved from openssl/ssl/ssl_lib.c