I had the in the context, where also the SSLCipherSuite is
defined.
As I understand, the Clients jumps in the Virtualhost context before TLS
handshake because of SNI, so it should be theoretically possible to process the
in the virtualhost context before handshake.
But I had old non-SNI-cpab
SSLCipherSuite -all:MD5
is served by Apache (at least with old Ubuntu 14) as expected.
Get's s F rating on
https://www.ssllabs.com/ssltest/
though :)
Nevermind, that SSLCipherSuite was just an example, I should have taken one that is really used, to prevent complication.
Gese