Disable weak crypto for the webserver

[m4rg4sh]

If you enable the secure port for the web-gui the default crypto settings are outdated and insecure.
This SSL/TLS test gives the server the grade F.

Please disable SSLv3, RC4, DES, and maybe even 3DES. All modern browsers will still be able to connect but the security will be massively improved.

Alternatively an option to configure these settings from the gui would be welcome.

[hugbug]

I think all modern browsers already negotiate secure ciphers and protocols. Disabling of less secure ones will not change a thing for them but may bring troubles when connecting from older devices.

[m4rg4sh]

An attacker can manipulate the handshake and force a downgrade to SSLv3 (POODLE)
This is why it should at least be possible to manually disable SSLv3 in the settings.