disable SSLv3
use haproxy 1.5 from backports
update deprecated options