Remediate BEAST vulnerability in Gluu
Remediate BEAST vulnerability in Gluu

Per https://github.com/GluuFederation/community-edition-setup/issues/457

Remove TLSv1.0 compatibility so that gluu's webserver SSL configuration is not vulnerable to BEAST.

Without this, it's possible to negotiate insecure cypher suites. From Gluu 3.1.3 production instance nessus scan:

Negotiated cipher suite: ECDHE-RSA-AES256-SHA|TLSv1|Kx=ECDH|Au=RSA|Enc=AES-CBC(256)|Mac=SHA1
GluuFederation/community-edition-setup,GluuFederation/community-edition-setup,GluuFederation/community-edition-setup