The cipher suite is currently statically set in the template for `apache::mod::ssl` at https://github.com/hunner/puppetlabs-apache/blob/refactor_module/templates/mod/ssl.conf.erb#L19 . It is configured with a cipher suite that is recommended by the Apache foundation as seen in http://svn.apache.org/viewvc?view=revision&revision=1203752

If you would like to override this on a per-vhost basis, I would prefer that the default be `HIGH:MEDIUM:!aNULL:!MD5` set in `apache::params` and used by both the `apache::mod::ssl` and `apache::vhost` manifests.