Disable SSLv2/v3 to avoid POODLE weakness (CVE-2014-3566)

Also set a more sane default set of ciphers to enable.

(cherry picked from commit a029492f1d556779cbd2de66ca6efcc53a74a418)