ocf_www: use modern ssl options to avoid POODLE