The message header for fake SSL 3.0/TLS 1.0 client hellos created from

SSL 2.0 client hellos added with the previous commit was totally wrong --
it must start with the message type, not the protocol version.
(Not that this particular header is actually used anywhere ...)