title: How to disable the SSLv3 protocol in Jetty to prevent Poodle Attack
body: <p>Is there any specific exclusion list available which disables only SSLv3 ciphers are not TLSv1/2.</p>
  
  <p>I have jetty 8, and upgrading to 9 is not an option now. My current jetty-ssl.xml looks as follows</p>
  
  <pre><code>&lt;Configure id="Server" class="org.eclipse.jetty.server.Server"&gt;
  &lt;Call name="addConnector"&gt;
      &lt;Arg&gt;
          &lt;New class="org.eclipse.jetty.server.ssl.SslSelectChannelConnector"&gt;
              &lt;Arg&gt;
                  &lt;New class="org.eclipse.jetty.http.ssl.SslContextFactory"&gt;
                      .........
                  &lt;/New&gt;
              &lt;/Arg&gt;
              &lt;Set name="ExcludeCipherSuites"&gt;
                  &lt;Array type="java.lang.String"&gt;             
                  &lt;Item&gt;SSL_RSA_WITH_NULL_MD5&lt;/Item&gt;
                  &lt;Item&gt;SSL_RSA_WITH_NULL_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_RSA_EXPORT_WITH_RC4_40_MD5&lt;/Item&gt;
                  &lt;Item&gt;SSL_RSA_WITH_RC4_128_MD5&lt;/Item&gt;
                  &lt;Item&gt;SSL_RSA_WITH_RC4_128_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5&lt;/Item&gt;
                  &lt;Item&gt;SSL_RSA_WITH_IDEA_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_RSA_EXPORT_WITH_DES40_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_RSA_WITH_DES_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_RSA_WITH_3DES_EDE_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_DH_DSS_EXPORT_WITH_DES40_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_DH_DSS_WITH_DES_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_DH_DSS_WITH_3DES_EDE_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_DH_RSA_EXPORT_WITH_DES40_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_DH_RSA_WITH_DES_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_DH_RSA_WITH_3DES_EDE_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_DHE_DSS_WITH_DES_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_DHE_RSA_WITH_DES_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_DH_anon_EXPORT_WITH_RC4_40_MD5&lt;/Item&gt;
                  &lt;Item&gt;SSL_DH_anon_WITH_RC4_128_MD5&lt;/Item&gt;
                  &lt;Item&gt;SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_DH_anon_WITH_DES_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_DH_anon_WITH_3DES_EDE_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_FORTEZZA_KEA_WITH_NULL_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_FORTEZZA_KEA_WITH_FORTEZZA_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_FORTEZZA_KEA_WITH_RC4_128_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_DHE_RSA_WITH_AES_128_CBC_SHA&lt;/Item&gt;
                  &lt;Item&gt;SSL_RSA_WITH_AES_128_CBC_SHA&lt;/Item&gt;   
                  &lt;/Array&gt;
              &lt;/Set&gt;
          &lt;/New&gt;
      &lt;/Arg&gt;
  &lt;/Call&gt;
  </code></pre>
  
  <p></p>
  
  <p>still when i run "sslscan --no-failed --ssl3  localhost:443" i get</p>
  
  <pre><code>    Supported Server Cipher(s):
    Accepted  SSLv3  128 bits  DHE-RSA-AES128-SHA
    Accepted  SSLv3  128 bits  AES128-SHA
  
  Prefered Server Cipher(s):
    SSLv3  128 bits  DHE-RSA-AES128-SHA
  </code></pre>