MCO-489 disable sslv2 and sslv3 by default

In the light of SSLv3/POODLE it's best if we just ask openssl to not do any SSLv2 or SSLv3 by default.  This is copied from puppet's fix for https://projects.puppetlabs.com/issues/19151