[JENKINS-25169]

Integrating 2.8 to really ensure SSLv2 is off (even when JDK supports
that, and we haven't found any JDKs that do that)

war/pom.xml

@@ -103,7 +103,7 @@ THE SOFTWARE.
       -->
       <groupId>org.jenkins-ci</groupId>
       <artifactId>winstone</artifactId>
-      <version>2.7</version>
+      <version>2.8</version>
       <scope>test</scope>
     </dependency>
     <dependency>