[CHEF-3858] ensure invalid key always fails to decrypt

In Ci, we occasionally see test failures when decryption with an
incorrect key does not raise an error, but instead returns garbage.

This fixes that issue by adding an HMAC-SHA2-256 of the encrypted data
to the version 1 format. For backwards compatibility, decryption will
continue if the hmac is missing; therefore, this does not increase the
security of encrypted data bag items.
[CHEF-3615] version 2 encryptor/decryptor for EDBIs

Authenticated encryption data bag items will be version 2 of the
encrypted data bag item format instead of tacked on to the version 1
format.

Authenticated encryption via OpenSSL cipher was considered, but older
openssl versions do not have, e.g., aes-256-gcm, so we are implementing
encrypt-then-mac with hmac-sha256 on top of existing aes cipher.

Code passes tests but is not yet exposed in configuration. TODO:
* Allow user to set desired version for encrypt.
* Allow user to set minimum required version for decrypt. Without this
  change, a MITM could simply change the format version to 1 to bypass
  the hmac.
[CHEF-3615] Make encrypted data bag format configurable

* Add an option to configure the version used when encrypting data bag
  items. This allows users to opt-in to newer encrypted data bag formats
  while the default remains compatible with earlier chef versions.
* Add an option to set a minimum valid encrypted data bag item format.
  This is useful on the client so that, for example, a MITM attacker
  cannot downgrade a v2 EDBI to v1.
Merge branch 'CHEF-3615'
[CHEF-4157] split Platform to prune dep graph

Many files/classes depend on Chef::Platform just to use the `windows?`
method. The part of Chef::Platform that maps providers to platforms has
very heavy dependencies (which may trigger circular deps when loading
some files) which are not needed for most users of Chef::Platform.
[CHEF-4157] remove all implementation from chef/platform
Merge branch 'CHEF-4157'
Version library fixes for Win2k3 non-existent GetProductInfo API, misplaced GetSystemMetrics API calls, irregular characters in Win2k3, Win2k8 WMI test validation
Service manager tests move to optional as short-term CI reliability improvement
Add more explanation in test comments on OS idiosyncrasies around OS version information
Merge pull request #752 from opscode/adamed/ci-failure-windows

Windows versions library and service_manager test reliability issues across versions of Windows
[CHEF-4106] Remove obsolete default configuration

Remove default Chef::Config keys that are not used any more.
Most (if not all) of these were used by the Chef server that
is now a separate project.
[CHEF-4176] remove unneeded aliases for chef_server_url
[CHEF-4176] default to https port 443 for chef_server_url
[CHEF-4176] update `knife configure -i` for Chef 11

* Chef 11 defaults to HTTPS on 443
* Chef 11 admin key is in /etc/chef-server/admin.pem
* Chef 11 validator key is in /etc/chef-server/chef-validator.pem

Ref: http://www.opscode.com/blog/2013/03/11/chef-11-server-up-and-running/
[CHEF-4176] reduce duplication in knife configure tests

Tests contain repeated references to the default admin key path,
validator path, and chef_server_url. Replace literals with let bindings
to avoid duplication. This is especially desirable for the negative
tests (e.g. `should_not match`) where drift in the values could render
the tests worthless.
Merge branch 'CHEF-4176'
colored output should be disabled by default on windows
test case for colored output flag for knife
test case for colored output flag for chef client.