Improve default OpenSSL ciphers

Also see the discussion here: https://bugs.ruby-lang.org/issues/9424

I'm of opinion that we can't ignore this and just leave this to
upstream OpenSSL.

@brixen Care to do a release with this fix?