diff --git a/src/openssl.c b/src/openssl.c
index 6cf4afe9..fd520423 100644
--- a/src/openssl.c
+++ b/src/openssl.c
@@ -225,7 +225,7 @@ ssl_init (void)
     case secure_protocol_auto:
     case secure_protocol_pfs:
       meth = SSLv23_client_method ();
-      ssl_options |= SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3;
+      ssl_options |= SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 | SSL_OP_NO_TLSv1 | SSL_OP_NO_TLSv1_1;
       break;
     case secure_protocol_tlsv1:
 #if !defined(LIBRESSL_VERSION_NUMBER) && (OPENSSL_VERSION_NUMBER >= 0x10100000L)