lighttpd: remove SSL/TLS weaknesses