Lighttpd

sslv3 protocol should be probably disabled by default (in the same way how sslv2 is) to mitigate "POODLE" vulnerability.

In case where it's still needed it can be enabled via:

ssl.use-sslv3 = "enable"

--- src/configfile.c
+++ src/configfile.c
@@ -182,7 +182,7 @@
                s->ssl_honor_cipher_order = 1;
                s->ssl_empty_fragments = 0;
                s->ssl_use_sslv2 = 0;
-               s->ssl_use_sslv3 = 1;
+               s->ssl_use_sslv3 = 0;
                s->use_ipv6      = 0;
                s->set_v6only    = 1;
                s->defer_accept  = 0;