PhantomJS needs to default to secure SSL Protocols

[OverlordQ]

Defaulting to SSLv3 is now a bad choice as it is provably broken.

[mattrobenolt]

👍

[vitallium]

Should we switch to TLS by default like the others?

/cc @detro @ariya @JamesMGreene

[dvdplm]

For anyone else cruising by here, --ssl-protocol=[sslv3|sslv2|tlsv1|any'] is the workaround for post-POODLE phantomjs based issues. Running tests with --ssl-protocol=any works for us against our newly patched servers.

@estoner Thanks! :)

[brian-c]

👍

[mattrobenolt]

I'd vote for the default to be any and sslv3 is just removed entirely.

[markstos]

This issue is addressed by my recent pull request: #12663

[ariya]

Refer to #12655.