OF-861 Disable SSLv3 for HTTPBind and Admin Console

src/java/org/jivesoftware/openfire/container/AdminConsolePlugin.java

@@ -144,6 +144,7 @@ public class AdminConsolePlugin implements Plugin {
                 }
 
                 final SslContextFactory sslContextFactory = new SslContextFactory();
+                sslContextFactory.addExcludeProtocols("SSLv3");
                 sslContextFactory.setTrustStorePassword(SSLConfig.gets2sTrustPassword());
                 sslContextFactory.setTrustStoreType(SSLConfig.getStoreType());
                 sslContextFactory.setKeyStorePath(SSLConfig.getKeystoreLocation());

src/java/org/jivesoftware/openfire/http/HttpBindManager.java

@@ -221,6 +221,7 @@ public final class HttpBindManager {
                 }
 
                 final SslContextFactory sslContextFactory = new SslContextFactory();
+                sslContextFactory.addExcludeProtocols("SSLv3");
                 sslContextFactory.setTrustStorePassword(SSLConfig.getc2sTrustPassword());
                 sslContextFactory.setTrustStoreType(SSLConfig.getStoreType());
                 sslContextFactory.setKeyStorePath(SSLConfig.getKeystoreLocation());