stephenrjohnson/puppetmodule — pull request #52 by gertvdijk (2014-07-29 12:13:04+00:00)
Title: Improve SSL protocol and ciphersuite configuration (security).

As recommended my Mozilla security team as described on
https://wiki.mozilla.org/Security/Server_Side_TLS

Choosing options in "Non-Backward Compatible Ciphersuite":

* Disable both SSLv2 and SSLv3 protocols (leaving TLSv1 and up).
* Set stronger ciphersuites.
* Prefer server advertised ciphersuites over client.