some cleanup and implementation
disable ssl3 and ensure SSL2 is definitely not available. should mitigate POODLE, but it's hard to tell with OpenSSL, either way switching to latest OpenSSL anyway, unfortunately that does not build with SSL3 disabled