We would like a way to enforce SSL protocols (TLSv1.2, only) in our Digital Ocean LBs. We want our DO LBs to support what protocols the reverse proxies allow; which we've limited to TLSv1.2.
# SSL v2 is insecure, so we need to disable it. We also disable SSLv3,
# as TLS 1.0 suffers a downgrade attack