Override ssl_options.versions in the app descriptor
Handle edge cases, log enabled TLS/SSL versions
Update rabbitmq.config.example
Remove bad SSL versions from the configured ones, don't hard code good versions (which differ across Erlang releases). Never permit use of bad SSL versions. Export a function to do this with.
Test for old Erlang, and shout if we are vulnerable.
Merge bug26419