Disable insecure SSL protocols at configure time

SSLv2 and SSLv3 have various protocol security flaws. They should
be disabled by default when configuring OpenSSL.

SSLv2 is known to be completely broken security-wise while for
SSLv3 there are high impact vulnerability security flaws known.

SSLv2:
  - https://en.wikipedia.org/wiki/Transport_Layer_Security#SSL_2.0
  - http://osvdb.org/56387

SSLv3:
- BEAST:
  - https://www.isecpartners.com/media/106031/ssl_attacks_survey.pdf
  - http://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.html
- Renegotiaton attack:
  - https://en.wikipedia.org/wiki/Transport_Layer_Security#Renegotiation_attack
  - http://www.g-sec.lu/practicaltls.pdf
- SSL Stripping:
  - https://www.blackhat.com/presentations/bh-dc-09/Marlinspike/BlackHat-DC-09-Marlinspike-Defeating-SSL.pdf
openssl: update 1.0.1h bottle.