Set cipher suites in default and PSK client explicitly

The allowed ciphers are taken from BSI TR-02102-2 sec. 3.3.1. As these are all
TLS 1.2 cipher suites and the real world is not so far yet, the SHA1 based
variants have been added as well.