web: fix security flaws
Issue generated from Tuleap's migration script. Originally submitted by: Guillaume Roguez (guillaume)
Repported by the GNU evaluation team
The Ring website itself receives an F grade from SSLlabs: it is
vulnerable to POODLE, an OpenSSL padding oracle attack, accepts RC4,
and doesn't consistently support forward secrecy.
SSLlabs reviews on our public web sites:
https://www.ssllabs.com/ssltest/analyze.html?d=ring.cx
https://www.ssllabs.com/ssltest/analyze.html?d=tuleap.ring.cx
https://www.ssllabs.com/ssltest/analyze.html?d=gerrit-ring.savoirfairelinux.com
https://www.ssllabs.com/ssltest/analyze.html?d=test.savoirfairelinux.com