We've been using OpenSSL-1.0.2 for months.

Signed-off-by: Piotr Sikora <piotr@cloudflare.com>
Add patch to disable RC4 for TLS v1.1+.

Without this patch, effective cipher list for TLS v1.1+
will be different than the one we use in production.

Signed-off-by: Piotr Sikora <piotr@cloudflare.com>
Make RC4 the least preferred cipher.

Before completely removing RC4, we need to make sure that
there are no clients that rely on it in order to connect
to CloudFlare.

While there, simplify the cipher list, since we no longer
need to inject RC4 in the middle of AES-based cipher suites.

Signed-off-by: Piotr Sikora <piotr@cloudflare.com>
Merge pull request #1 from PiotrSikora/piotr/reality

Sync with reality