The usage argument should specify the minimum supported SSL/TLS version, like the OpenSSL implementation does. Currently, if, e.g. TLSV1_CLIENT_USE is specified, it will prevent TLS 1.1 or TLS 1.2 from being used.