Upgrade openssl to 0.9.8zc.

Also refactored the RPM spec file a bit, to only mention the version in
one place.

(cherry picked from commit 94141f15c617861f5a55f3e4167e8ab9417c4433)
Change self-signed certificate RSA key size from 4096 to 2048 bits

RPM installation time should improve by quite a bit, especially on
systems with bad entropy source. Really, why spend 100x more time to
generate 4096 bits, when 2048 bits is perfectly fine by today's
standards, let alone that we're talking about a self-signed certificate.

(cherry picked from commit 799c695fdb1d107a606943daf115252f6b79f5bf)
Further sanitisation of the self-signed certificate

Added "-sha256 -utf8" to work in future browsers, removed unneeded stuff
from subject since CN is the only thing that matters in self-signed
certificates.

(cherry picked from commit 672718b05e0ded61a646412c065e2ffb1f185f89)
Patch not needed anymore for Solaris build of OpenSSL 0.9.8zc.

(cherry picked from commit a6f4a9bffe660f415434853d88c12bd6ee1bad8a)
Reverting to OpenSSL 0.9.8zb from 0.9.8zc.

Reason is that tests of OpenSSL do not pass with FIPS-1.2.4. Has been fixed
in 0.9.8 branch upstream, see

https://github.com/openssl/openssl/commit/f33636faf77aa2b8bb96f75b9719cd3f5b41e3ba
(cherry picked from commit 08ecbd18bde55f3bc708bf589da5c6d9f4adff90)
Disable SSLv3 on apache to mitigate POODLE.

(cherry picked from commit 67102ff57645f435ad1807861760ddc1fed0aa78)
Merge pull request #26 from jimis/3.6.x

SSL and OpenSSL stuff