If SSL_CTX_set_security_level() is used with a level >= 3 in a client application the initial handshake fails with "no ciphers available".

I have been able to reproduce the issue with a raw checkout of the OpenSSL_1_1_1 git tag. The problem doesn't appear with the OpenSSL_1_1_1a tag.

To test you can apply this patch to s_client:

--- a/apps/s_client.c
+++ b/apps/s_client.c
@@ -1749,6 +1749,8 @@ int s_client_main(int argc, char **argv)
         SSL_CTX_set_default_read_buffer_len(ctx, read_buf_len);
     }
 
+    SSL_CTX_set_security_level(ctx, 3);
+
     if (maxfraglen > 0
             && !SSL_CTX_set_tlsext_max_fragment_length(ctx, maxfraglen)) {
         BIO_printf(bio_err,