This issue is so old and still open. Please pay more attention to security. Despite selecting rejected protocols to all except TLSv1.2 it still choses to use TLSv1.0. Choosing "Only strong ciphers with perfect forward secrecy", makes no difference, except from chosing ECDHE_RSA with P-384 key exchange and AES_256_CBC with HMAC-SHA1 cipher but TLSv1.0 still in place.