Move include to the top and nuke pointless comments.
Calling signal once to ignore SIGPIPE is sufficient - we do not need to do
this again in each app.

ok miod@
Replace (sometimes conditional) use of alloca with malloc, and clearing
through volatile pointers with explicit_bzero().

ok beck@ jsing@
Stop pulling signal.h into apps.h - just include it from openssl.c where
it is needed.
signal.h is not needed here.
Clean up the SSL cipher initialisation and use C99 initialisers for
clarity, grepability and to protect from future field reordering/removal.

ok miod@