A credential made from the older SCHANNEL_CRED structure cannot reach TLS
1.3 on Windows, which offers it only through SCH_CREDENTIALS, and its
grbitEnabledProtocols bound the versions it uses. Raven negotiated TLS 1.3
regardless; aria2, which knows TLS 1.1 and 1.2 only, aborted after the
handshake. The enabled protocols now set the lowest and highest version,
and SCHANNEL_CRED stops at TLS 1.2.
Assisted-by: Claude Code:claude-opus-5-5
AI-Scope: the version limits
(cherry picked from commit b14156cf5618db6dd4a93db39f6e007d412bd41a)