def resolve_ssl_version(candidate):
    """
    like resolve_cert_reqs
    """
    if candidate is None: