FT: Ciphers white- and black-list
FT: Ciphers white- and black-list

 Only these ciphers will be supported by our HTTPS servers.

 - Give preference to EC over RSA
 - Use Ephemeral Diffie-Hellman for Forward Secrecy
 - Give preference to AES-128 and -256
 - Give preference to SHA-256 and -384
 - Avoid no-encryption mode (NULL)
 - Avoid legacy EXPORT crypto
 - Avoid DES, RC4, IDEA
 - Avoid pre-shared-key PSK
 - Avoid secure-remote-password SRP

 See:
 - https://testssl.sh/openssl-rfc.mappping.html
 - https://weakdh.org/sysadmin.html
 - https://www.openssl.org/docs/manmaster/apps/ \
    ciphers.html#CIPHER_LIST_FORMAT

scality/Arsenal,scality/Arsenal