Is there a way to explicitly configure OpenSSL to allow AES (or in general, block ciphers) only for clients that use a TLS version >= 1.1?
This would protect against the BEAST attack, while still allowing the use of ciphers more secure than the ancient RC4.
The suggested workaround for OpenSSL (enforce the server's cipher preference order; prefer AES-GCM over RC4 over AES-CBC) excludes all clients that don't support the GCM cipher suites, even though they are perfectly capable of securely using AES-CBC due to the fixes in TLS 1.1.
It seems that many popular sites have opted to just use RC4 for everything, which doesn't seem like a really good idea (RC4 has many known weaknesses, and many TLS implementations have workarounds even for TLS <= 1.1). I wonder if a server-side "use AES, but only if it's safe"-flag could improve the situation.