If there are any packages that uses SSLv2 by default you might want to file a security bug to get them fixed. I believe SSLv2 is really that bad, it just gives a false sense of security. /Simon