config: disable ssl3 by default