sslv3: catch you on the flip side

Removes SSLv3 and IDEA from OpenSSL, and revisions a decent chunk of
things to deal with it. Most things are fine, and nothing is hugely
hugely broken as far as my testing goes, but little minor things,
certain obscure situations, etc, better handle those situations when
built explicitly against the new OpenSSL.

This brings us on par with Debian Jessie, which is expected to be
released as stable by February.

Closes #34634.