When running the update-dispatcher.sh script to assign new certificates to portal the SSL and cipher configuration is overwritten with old ciphers ignoring the custom settings in portal.conf .
As a workaround you can create a custom update-dispatcher.sh script and update the part where the TLS and Ciphers are set to match your configuration
A fix will be included in the next portal release .