https://fedorahosted.org/389/ticket/47838

Thanks to Ludwig and Rich for their comments.  I've updated the patch on ssl.c as well as the testcase based upon them.

https://fedorahosted.org/389/attachment/ticket/47838/0001-Ticket-47838-harden-the-list-of-ciphers-available-by.patch
git patch file (master) -- revised; As pointed out in comment:7, disable all ciphers if nsSSL3Cipher does not exist or empty.

https://fedorahosted.org/389/attachment/ticket/47838/0002-Ticket-47838-CI-test-add-test-case-for-ticket-47838.patch
git patch file (master) -- revised; Added more test cases.