Teach the get_mozilla_ciphers.py script to parse recent firefoxen
Update ciphers.inc to match ff28

The major changes are to re-order some ciphers, to drop the ECDH suites
(note: *not* ECDHE: ECDHE is still there), to kill off some made-up
stuff (like the SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA suite), to drop
some of the DSS suites... *and* to enable the ECDHE+GCM ciphersuites.

This change is autogenerated by get_mozilla_ciphers.py from
Firefox 28 and OpenSSL 1.0.1g.

Resolves ticket 11438.
Merge remote-tracking branch 'public/update_ciphers_ff28'
Oops, actually add the changelog entries, lightly categorized
Move and combine some 0.2.5.4-alpha changelog sections.