When going through server logs I found that for one particular connection between our Server <> Client, there are multiple handshakes it starts with the highest TLS version ( TLSv1.2 ) but immediately, there is a new Client hello with TLSv1.2 and after multiple such handshakes Clienthellos with TLSv1.0 ( which is not what we want to use ). After disabling TLSv1.0 this connection can fail and I want to understand: 1) Why there are multiple handshakes? is this common? 2) How can we force the client to only reply with the TLSv1.2 protocol?
My guess is that this has to do with certificates at the client's end but I need your suggestions on possible reasons and if this is something common. Thanks!