don't force ssl_v3, disabled on many http servers due to recent vulns