Here is the investigation report on the issue:
https://fedorahosted.org/pki/ticket/1556#comment:1
Under which a couple things could be discussed.
Here is the workaround:
https://fedorahosted.org/pki/ticket/1556#comment:2
thanks,
Christina
On 08/13/2015 07:47 PM, Christina Fu wrote:
 This is a preliminary patch for:
 
https://fedorahosted.org/pki/ticket/1556 Weak HTTPS TLS ciphers
 It is preliminary because I have to leave a couple RSA ciphers under 
 the ECC option due to the fact that if we leave that out, the 
 configuration will not be able to connect with the temporary ssl 
 server cert.
 We could add code to remove those after the configuration, or we can 
 leave it for a separate ticket.
 We can discuss tomorrow morning.
 thanks,
 Christina
 _______________________________________________
 Pki-devel mailing list
 Pki-devel(a)redhat.com
 
https://www.redhat.com/mailman/listinfo/pki-devel