On Wed, Oct 29, 2014 at 02:29:21PM -0700, Bryan Talbot wrote: > I think he wants to globally disable SSLv3 (by removing support at compile > time) so it can't be accidentally enabled in an errant bind option. There's > no way to disable SSLv3 globally in the haproxy config.
Then probably we should have a flag for this in the global section, just like we have settings for dh-params or verify-none. Willy

