improves SSL configuration for PFS and Poodle.