(MCO-489) Disable empty fragments for BEAST attack mitigation
(MCO-489) Disable empty fragments for BEAST attack mitigation

Ruby 2 disables this flag by default (thus enabling empty fragments) for
BEAST attack mitigation. Empty fragments are used when using TLSv1.0
with a CBC mode cipher. For reasons as-yet unclear, ActiveMQ seems to
respond poorly when they are used, and mcollective can't talk to it.

This is problematic combined with the previous patch to disable SSLv2
and SSLv3, because versions of openssl < 1.0.1 (which are still common)
don't support TLSv1.1 or TLSv1.2. This leaves only TLSv1.0 as an
option, with CBC mode ciphers preferred. This causes trouble with
ActiveMQ.

Because BEAST isn't an attack that affects mcollective (it's a
chosen-plaintext attack against browsers), this commit just reenables
the flag to disable empty fragments. This means mcollective will
be able to talk to ActiveMQ on ruby 2.0 with openssl < 1.0.1.

johnduarte/marionette-collective,spandeyindia/marionette-collective-1,shrug/marionette-collective,puppetlabs/marionette-collective,spandeyindia/marionette-collective-1,richardc/marionette-collective,kbarber/marionette-collective,puppetlabs/marionette-collective,geoffnichols/marionette-collective,Iristyle/marionette-collective,spandeyindia/marionette-collective-1,johnduarte/marionette-collective,richardc/marionette-collective,kbarber/marionette-collective,geoffnichols/marionette-collective,Iristyle/marionette-collective,ploubser/marionette-collective,spandeyindia/marionette-collective-1,pimpajr/marionette-collective,heathseals/marionette-collective,kbarber/marionette-collective,Iristyle/marionette-collective,heathseals/marionette-collective,MikaelSmith/marionette-collective,spandeyindia/marionette-collective-1,jessereynolds/marionette-collective,richardc/marionette-collective,kbarber/marionette-collective,kbarber/marionette-collective,pimpajr/marionette-collective,kbarber/marionette-collective,Iristyle/marionette-collective,MikaelSmith/marionette-collective,heathseals/marionette-collective,shrug/marionette-collective,johnduarte/marionette-collective,geoffnichols/marionette-collective,richardc/marionette-collective,ploubser/marionette-collective,MikaelSmith/marionette-collective,puppetlabs/marionette-collective,richardc/marionette-collective,heathseals/marionette-collective,puppetlabs/marionette-collective,pimpajr/marionette-collective,MikaelSmith/marionette-collective,johnduarte/marionette-collective,jessereynolds/marionette-collective,Iristyle/marionette-collective,shrug/marionette-collective,pimpajr/marionette-collective,spandeyindia/marionette-collective-1,jessereynolds/marionette-collective,puppetlabs/marionette-collective,pimpajr/marionette-collective,shrug/marionette-collective,jessereynolds/marionette-collective,geoffnichols/marionette-collective,shrug/marionette-collective,ploubser/marionette-collective,ploubser/marionette-collective,heathseals/marionette-collective,richardc/marionette-collective,MikaelSmith/marionette-collective,ploubser/marionette-collective,puppetlabs/marionette-collective,johnduarte/marionette-collective,jessereynolds/marionette-collective,pimpajr/marionette-collective,johnduarte/marionette-collective,Iristyle/marionette-collective,MikaelSmith/marionette-collective,heathseals/marionette-collective,geoffnichols/marionette-collective,shrug/marionette-collective,jessereynolds/marionette-collective