bugzilla, use better SSL cipher suite

I want to fix / SSLLabs said:

"RC4 cipher is used with TLS 1.1 or newer protocols,
even though stronger ciphers are available."

RT #6763
RT #7281
bug 53259

"The server does not support Forward Secrecy with the reference browsers."

Mozilla says:
"The general purpose ciphersuite at the time of this writing is:"

<.. what i used below ..>

"If your version of OpenSSL is old, unavailable ciphers will be
discarded automatically.
Always use the full ciphersuite above and let OpenSSL pick
the ones it supports."

- ECDHE+AESGCM ciphers are selected first.
   These are TLS 1.2 ciphers and not widely supported at the moment.
    No known attack currently target these ciphers.
- PFS ciphersuites are preferred, with ECDHE first, then DHE.
    AES 128 is preferred to AES 256....
    AES is preferred to RC4. BEAST attacks on AES are mitigated in TLS 1.1 and above,
    and difficult to achieve in TLS 1.0.
    In comparison, attacks on RC4 are not mitigated and likely to
    become more and more dangerous.
    RC4 is on the path to removal, but still present for backward compatibiliy

from: https://wiki.mozilla.org/Security/Server_Side_TLS

Chris Steipp says:

" I'd definitely be up for trying Mozilla's recommended ciphersuite"
"I'd expect to see 5-10% overhead, but it would be great to get real numbers."
"PFS is preferred, and rc4 is discouraged
(but preferred over 3des, which has horrible performance),
so overall load will definitely increase, just how much depends
on what kinds of browsers hit the server."

Added SSLCompression Off to prevent CRIME attacks (see
http://en.wikipedia.org/wiki/CRIME)

Change-Id: I7e9adc182dc16b70fab1871d1400018a80f71769
Merge "bugzilla, use better SSL cipher suite" into production