https://fedorahosted.org/389/ticket/47838
Thanks to Ludwig and Rich for their comments. I've updated the
patch on ssl.c as well as the testcase based upon them.
https://fedorahosted.org/389/attachment/ticket/47838/0001-Ticket-47838-harden-the-list-of-ciphers-available-by.patch
git patch file (master) -- revised; As pointed out in comment:7, disable all
ciphers if nsSSL3Cipher does not exist or empty.
https://fedorahosted.org/389/attachment/ticket/47838/0002-Ticket-47838-CI-test-add-test-case-for-ticket-47838.patch
git patch file (master) -- revised; Added more test cases.