No peer certificate after server security change to SSLProtocol +TLSv1.2 +TLSv1.1

[yanokwa]

Software and hardware versions

v.1.17.2

Problem description

Recently our server administrator started using SSLProtocol +TLSv1.2 +TLSv1.1 (instead of Tls1) for security reasons. From that moment on we had an “Generic exception: No peer certificate” error uploading files to our Unix RedHat 6.10 server.
...
Our IT department have tempororarily reset security level to TLSv1.0, but they won't allow low security in the near future.

https://forum.opendatakit.org/t/odk-collect-error-no-peer-certificate-after-server-security-change-to-sslprotocol-tlsv1-2-tlsv1-1-instead-of-tls1/15630

Other information

Older versions of Android don't support newer versions of TLS and I'm not sure there is an easy way to retrofit it. square/okhttp#2372 is a good place to start.