in httpd.conf, put this somewhere after LoadModule mod_ssl:
SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
and this declaration in each VirtualHost’s Directory:
SSLRequire %{SSL_CIPHER_USEKEYSIZE} >= 128