up to 1.4.34; addresses CVE-2013-4508, CVE-2013-4559, CVE-2013-4560
update ssl.cipher-list from upstream tarball. should we enable that list by default?
describe more config params. taken from upstream config