pveproxy: limit ourselfes to tlsv1

older versions are considered insecure, for example search for "Poodle"-Attac

bin/pveproxy

@@ -105,6 +105,9 @@ eval {
 	logfile => '/var/log/pveproxy/access.log',
 	lockfile => $lockfile,
 	ssl => {
+	    # Note: older versions are considered insecure, for example
+	    # search for "Poodle"-Attac
+	    method => "tlsv1",
 	    cipher_list => $proxyconf->{CIPHERS} || 'HIGH:MEDIUM:!aNULL:!MD5',
 	    key_file => '/etc/pve/local/pve-ssl.key',
 	    cert_file => '/etc/pve/local/pve-ssl.pem',