private void disableInsecureProtocols(SslContextFactory factory) {
    // by default all protocols should be available, excluding TLSv1.0
    factory.setExcludeProtocols(DEPRECATED_SSL_PROTOCOLS);
    factory.setIncludeProtocols(new String[] {"SSLv2Hello","SSLv3","TLSv1.1","TLSv1.2"});

    if (!configs.getSrvrDisabledCiphers().isEmpty()) {
      String[] masks = configs.getSrvrDisabledCiphers().split(DISABLED_ENTRIES_SPLITTER);
      factory.setExcludeCipherSuites(masks);
    }
    if (!configs.getSrvrDisabledProtocols().isEmpty()) {
      String[] masks = configs.getSrvrDisabledProtocols().split(DISABLED_ENTRIES_SPLITTER);
      factory.setExcludeProtocols(masks);
    }
  }
Disables insecure protocols and cipher suites (exact list is defined
at server properties)
ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java