https://fedorahosted.org/389/ticket/47838
Thanks to Ludwig and Rich for their comments. I've updated the patch on ssl.c as well as the testcase based upon them.
https://fedorahosted.org/389/attachment/ticket/47838/0001-Ticket-47838-harde... git patch file (master) -- revised; As pointed out in comment:7 https://fedorahosted.org/389/ticket/47838#comment:7, disable all ciphers if nsSSL3Cipher does not exist or empty.
https://fedorahosted.org/389/attachment/ticket/47838/0002-Ticket-47838-CI-te... git patch file (master) -- revised; Added more test cases.
389-devel@lists.fedoraproject.org