diff -urN mozilla-esr24.orig/netwerk/base/public/security-prefs.js mozilla-esr24/netwerk/base/public/security-prefs.js
--- mozilla-esr24.orig/netwerk/base/public/security-prefs.js	2014-01-31 18:40:12.000000000 +0100
+++ mozilla-esr24/netwerk/base/public/security-prefs.js	2014-02-19 07:42:57.449021992 +0100
@@ -3,7 +3,7 @@
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 
 pref("security.tls.version.min", 0);
-pref("security.tls.version.max", 1);
+pref("security.tls.version.max", 3);
 pref("security.enable_tls_session_tickets", true);
 pref("security.enable_md5_signatures", false);
 
@@ -14,41 +14,46 @@
 pref("security.ssl.warn_missing_rfc5746",  1);
 pref("security.ssl.enable_false_start", false);
 
-pref("security.ssl3.rsa_rc4_128_md5", true);
-pref("security.ssl3.rsa_rc4_128_sha", true);
-pref("security.ssl3.rsa_fips_des_ede3_sha", true);
-pref("security.ssl3.rsa_des_ede3_sha", true);
+pref("security.ssl3.ecdhe_rsa_aes_128_gcm_sha256", true);
+pref("security.ssl3.ecdhe_rsa_aes_128_sha256", true);
+pref("security.ssl3.dhe_rsa_aes_128_gcm_sha256", true);
+pref("security.ssl3.dhe_rsa_aes_128_sha256", true);
+pref("security.ssl3.rsa_rc4_128_md5", false);
+pref("security.ssl3.rsa_rc4_128_sha", false);
+pref("security.ssl3.rsa_fips_des_ede3_sha", false);
+pref("security.ssl3.rsa_des_ede3_sha", false);
 pref("security.ssl3.dhe_rsa_camellia_256_sha", true);
 pref("security.ssl3.dhe_dss_camellia_256_sha", true);
 pref("security.ssl3.rsa_camellia_256_sha", true);
+pref("security.ssl3.rsa_camellia_256_sha", true);
 pref("security.ssl3.dhe_rsa_camellia_128_sha", true);
 pref("security.ssl3.dhe_dss_camellia_128_sha", true);
 pref("security.ssl3.rsa_camellia_128_sha", true);
 pref("security.ssl3.dhe_rsa_aes_256_sha", true);
-pref("security.ssl3.dhe_dss_aes_256_sha", true);
+pref("security.ssl3.dhe_dss_aes_256_sha", false);
 pref("security.ssl3.rsa_aes_256_sha", true);
 pref("security.ssl3.ecdhe_ecdsa_aes_256_sha", true);
 pref("security.ssl3.ecdhe_ecdsa_aes_128_sha", true);
-pref("security.ssl3.ecdhe_ecdsa_des_ede3_sha", true);
-pref("security.ssl3.ecdhe_ecdsa_rc4_128_sha", true);
+pref("security.ssl3.ecdhe_ecdsa_des_ede3_sha", false);
+pref("security.ssl3.ecdhe_ecdsa_rc4_128_sha", false);
 pref("security.ssl3.ecdhe_rsa_aes_256_sha", true);
 pref("security.ssl3.ecdhe_rsa_aes_128_sha", true);
-pref("security.ssl3.ecdhe_rsa_des_ede3_sha", true);
-pref("security.ssl3.ecdhe_rsa_rc4_128_sha", true);
+pref("security.ssl3.ecdhe_rsa_des_ede3_sha", false);
+pref("security.ssl3.ecdhe_rsa_rc4_128_sha", false);
 pref("security.ssl3.ecdh_ecdsa_aes_256_sha", true);
 pref("security.ssl3.ecdh_ecdsa_aes_128_sha", true);
 pref("security.ssl3.ecdh_ecdsa_des_ede3_sha", true);
-pref("security.ssl3.ecdh_ecdsa_rc4_128_sha", true);
+pref("security.ssl3.ecdh_ecdsa_rc4_128_sha", false);
 pref("security.ssl3.ecdh_rsa_aes_256_sha", true);
 pref("security.ssl3.ecdh_rsa_aes_128_sha", true);
-pref("security.ssl3.ecdh_rsa_des_ede3_sha", true);
-pref("security.ssl3.ecdh_rsa_rc4_128_sha", true);
+pref("security.ssl3.ecdh_rsa_des_ede3_sha", false);
+pref("security.ssl3.ecdh_rsa_rc4_128_sha", false);
 pref("security.ssl3.dhe_rsa_aes_128_sha", true);
-pref("security.ssl3.dhe_dss_aes_128_sha", true);
+pref("security.ssl3.dhe_dss_aes_128_sha", false);
 pref("security.ssl3.rsa_aes_128_sha", true);
-pref("security.ssl3.dhe_rsa_des_ede3_sha", true);
-pref("security.ssl3.dhe_dss_des_ede3_sha", true);
-pref("security.ssl3.rsa_seed_sha", true);
+pref("security.ssl3.dhe_rsa_des_ede3_sha", false);
+pref("security.ssl3.dhe_dss_des_ede3_sha", false);
+pref("security.ssl3.rsa_seed_sha", false);
 
 pref("security.default_personal_cert",   "Ask Every Time");
 pref("security.remember_cert_checkbox_default_setting", true);
diff -urN mozilla-esr24.orig/security/manager/ssl/src/nsNSSComponent.cpp mozilla-esr24/security/manager/ssl/src/nsNSSComponent.cpp
--- mozilla-esr24.orig/security/manager/ssl/src/nsNSSComponent.cpp	2014-01-31 18:40:14.000000000 +0100
+++ mozilla-esr24/security/manager/ssl/src/nsNSSComponent.cpp	2014-02-19 07:39:31.030977575 +0100
@@ -829,6 +829,10 @@
 
 static CipherPref CipherPrefs[] = {
  /* SSL3/TLS cipher suites*/
+ {"security.ssl3.ecdhe_rsa_aes_128_gcm_sha256", TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256},
+ {"security.ssl3.ecdhe_rsa_aes_128_sha256", TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256},  
+ {"security.ssl3.dhe_rsa_aes_128_gcm_sha256", TLS_DHE_RSA_WITH_AES_128_GCM_SHA256},
+ {"security.ssl3.dhe_rsa_aes_128_sha256", TLS_DHE_RSA_WITH_AES_128_CBC_SHA256}, 
  {"security.ssl3.rsa_rc4_128_md5", SSL_RSA_WITH_RC4_128_MD5}, // 128-bit RC4 encryption with RSA and an MD5 MAC
  {"security.ssl3.rsa_rc4_128_sha", SSL_RSA_WITH_RC4_128_SHA}, // 128-bit RC4 encryption with RSA and a SHA1 MAC
  {"security.ssl3.rsa_fips_des_ede3_sha", SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA}, // 168-bit Triple DES with RSA and a SHA1 MAC (FIPS)
