I remember a support ticket where TLS handshakes were failing and the root cause ended up being that the customer had "strict security requirements" which meant they were enabling... ciphers that used 3DES facepalm