Removes non-FS ciphers to make SSLLabs not warn on weak ciphers

[zwoop]

This is as reported by SSLLabs, and doing this change eliminates
their warnings about weak non-FS ciphers.

[zwoop]

Before patch:

After patch:

[maskit]

It seems fine but probably not. #4007

[zwoop]

Ok, so probably we should remove the TLS v1.3 portion out of this patch then, and just fix the weak ciphers that are in TLS < v1.3 ?

We probably should make sure we can get the TLS v1.3 ciphers in v8.0.x of ATS as well IMO, particularly if we need to add a new configuration (I'm hoping we can avoid a new config).

[zwoop]

I removed the TLS13_ portion from this PR. The Weak ciphers change is still as above (same effect on the SSLLabs checks).

[masaori335]

The WEAK ciphers are called below in OpenSSL. And I confirmed these are removed.

TLS_RSA_WITH_AES_128_CBC_SHA            AES128-SHA
TLS_RSA_WITH_AES_256_CBC_SHA            AES256-SHA
TLS_RSA_WITH_AES_128_CBC_SHA256           AES128-SHA256
TLS_RSA_WITH_AES_256_CBC_SHA256           AES256-SHA256
TLS_RSA_WITH_AES_128_GCM_SHA256           AES128-GCM-SHA256
TLS_RSA_WITH_AES_256_GCM_SHA384           AES256-GCM-SHA384

https://www.openssl.org/docs/manmaster/man1/openssl-ciphers.html

[zwoop]

@masaori335 @maskit Please confirm that you think this is a good change for 8.0.0 or not.

[masaori335]

I'm pretty sure that this is a good change for 8.0.0. According to "Handshake Simulation" on SSLLabs, no client selects these ciphers. It looks no critical side effect of removing them.

[zwoop]

Cherry-picked to 8.0.x