never do this
            a properly configured webserver.

            testbed for LibReSSL and TLS ciphersuites that address growing concerns and backwards compatibility.

            questions/comments/spam to kremlin.cc!ian@

            (note: the above ssl/tls score was awarded to a configuration demanding protocols even up-to-date browsers cannot
             provide; we have switched to mozilla's suite for now) fixed.

            here is the ciphersuite:

            kEDH+AESGCM:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256
            -SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SH
            A256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-
            SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-G
            CM-SHA256:AES256-GCM-SHA384:!3DES:!DES:!DHE-RSA-AES128-GCM-SHA256:!DHE-RSA-AES25
            6-SHA:!EDE3:!EDH-DSS-CBC-SHA:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC-SHA:!EDH-RSA
            -DES-CBC3-SHA:!EXP-EDH-DSS-DES-CBC-SHA:!EXP-EDH-RSA-DES-CBC-SHA:!EXPORT:!MD5:!PS
            K:!RC4-SHA:!aNULL:!eNULL

            $ dmesg

                 OpenBSD 5.8-beta (GENERIC.MP) #1114: Tue Jun 30 11:15:16 MDT 2015
                    deraadt@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
                real mem = 1593823232 (1519MB)
                avail mem = 1541705728 (1470MB)
                mpath0 at root
                scsibus0 at mpath0: 256 targets
                mainbus0 at root
                bios0 at mainbus0: SMBIOS rev. 2.4 @ 0x5ffffea0 (11 entries)
                bios0: vendor Seabios version "0.5.1" date 01/01/2007
                bios0: Red Hat KVM
                acpi0 at bios0: rev 0
                acpi0: sleep states S5
                acpi0: tables DSDT FACP SSDT APIC SSDT
                acpi0: wakeup devices
                acpitimer0 at acpi0: 3579545 Hz, 24 bits
                acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat
                cpu0 at mainbus0: apid 0 (boot processor)
                cpu0: QEMU Virtual CPU version (cpu64-rhel6), 2000.31 MHz
                cpu0: FPU,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SSE3,CX16,HV,NXE,LONG,LAHF
                cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache
                cpu0: ITLB 255 4KB entries direct-mapped, 255 4MB entries direct-mapped
                cpu0: DTLB 255 4KB entries direct-mapped, 255 4MB entries direct-mapped
                cpu0: smt 0, core 0, package 0
                mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
                cpu0: apic clock running at 1000MHz
                cpu1 at mainbus0: apid 1 (application processor)
                cpu1: QEMU Virtual CPU version (cpu64-rhel6), 2000.13 MHz
                cpu1: FPU,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SSE3,CX16,HV,NXE,LONG,LAHF
                cpu1: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache
                cpu1: ITLB 255 4KB entries direct-mapped, 255 4MB entries direct-mapped
                cpu1: DTLB 255 4KB entries direct-mapped, 255 4MB entries direct-mapped
                cpu1: smt 0, core 0, package 1
                ioapic0 at mainbus0: apid 0 pa 0xfec00000, version 11, 24 pins
                acpiprt0 at acpi0: bus 0 (PCI0)
                acpicpu0 at acpi0
                acpicpu1 at acpi0
                pci0 at mainbus0 bus 0
                pchb0 at pci0 dev 0 function 0 "Intel 82441FX" rev 0x02
                pcib0 at pci0 dev 1 function 0 "Intel 82371SB ISA" rev 0x00
                pciide0 at pci0 dev 1 function 1 "Intel 82371SB IDE" rev 0x00: DMA, channel 0 wired to compatibility, channel 1 wired to compatibility
                wd0 at pciide0 channel 0 drive 0: 
                wd0: 16-sector PIO, LBA48, 20480MB, 41943040 sectors
                wd0(pciide0:0:0): using PIO mode 0, DMA mode 2
                atapiscsi0 at pciide0 channel 1 drive 0
                scsibus1 at atapiscsi0: 2 targets
                cd0 at scsibus1 targ 0 lun 0:  ATAPI 5/cdrom removable
                cd0(pciide0:1:0): using PIO mode 0
                uhci0 at pci0 dev 1 function 2 "Intel 82371SB USB" rev 0x01: apic 0 int 11
                piixpm0 at pci0 dev 1 function 3 "Intel 82371AB Power" rev 0x03: apic 0 int 9
                iic0 at piixpm0
                iic0: addr 0x18 00=00 01=00 02=00 03=00 04=00 05=00 06=00 07=00 08=00 words 00=0000 01=0000 02=0000 03=0000 04=0000 05=0000 06=0000 07=0000
                iic0: addr 0x1a 00=00 01=00 02=00 03=00 04=00 05=00 06=00 07=00 08=00 words 00=0000 01=0000 02=0000 03=0000 04=0000 05=0000 06=0000 07=0000
                iic0: addr 0x29 00=00 01=00 02=00 03=00 04=00 05=00 06=00 07=00 08=00 words 00=0000 01=0000 02=0000 03=0000 04=0000 05=0000 06=0000 07=0000
                iic0: addr 0x2b 00=00 01=00 02=00 03=00 04=00 05=00 06=00 07=00 08=00 words 00=0000 01=0000 02=0000 03=0000 04=0000 05=0000 06=0000 07=0000
                iic0: addr 0x4c 00=00 01=00 02=00 03=00 04=00 05=00 06=00 07=00 08=00 words 00=0000 01=0000 02=0000 03=0000 04=0000 05=0000 06=0000 07=0000
                iic0: addr 0x4e 00=00 01=00 02=00 03=00 04=00 05=00 06=00 07=00 08=00 words 00=0000 01=0000 02=0000 03=0000 04=0000 05=0000 06=0000 07=0000
                vga1 at pci0 dev 2 function 0 "Cirrus Logic CL-GD5446" rev 0x00
                wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
                wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
                em0 at pci0 dev 3 function 0 "Intel 82540EM" rev 0x03: apic 0 int 11, address 00:16:3c:72:be:9b
                virtio0 at pci0 dev 4 function 0 "Qumranet Virtio Memory" rev 0x00: Virtio Memory Balloon Device
                viomb0 at virtio0
                virtio0: apic 0 int 11
                isa0 at pcib0
                isadma0 at isa0
                fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
                fd0 at fdc0 drive 0: density unknown
                fd1 at fdc0 drive 1: density unknown
                pckbc0 at isa0 port 0x60/5 irq 1 irq 12
                pckbd0 at pckbc0 (kbd slot)
                wskbd0 at pckbd0: console keyboard, using wsdisplay0
                pms0 at pckbc0 (aux slot)
                wsmouse0 at pms0 mux 0
                pcppi0 at isa0 port 0x61
                spkr0 at pcppi0
                usb0 at uhci0: USB revision 1.0
                uhub0 at usb0 "Intel UHCI root hub" rev 1.00/1.00 addr 1
                nvram: invalid checksum
                uhidev0 at uhub0 port 1 configuration 1 interface 0 "QEMU 0.12.1 QEMU USB Tablet" rev 2.00/0.00 addr 2
                uhidev0: iclass 3/0
                ums0 at uhidev0: 3 buttons, Z dir
                wsmouse1 at ums0 mux 0
                vscsi0 at root
                scsibus2 at vscsi0: 256 targets
                softraid0 at root
                scsibus3 at softraid0: 256 targets
                root on wd0a (3fc7e5cf4b87f84e.a) swap on wd0b dump on wd0b
                clock: unknown CMOS layout