in httpd.conf, put this somewhere after LoadModule mod_ssl:

SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

and this declaration in each VirtualHost’s Directory:

SSLRequire %{SSL_CIPHER_USEKEYSIZE} >= 128