[fix] Ignore deprecated SSLv2 and SSLv3 encryptions (#530)

* [fix] Ignore deprecated SSLv2 and SSLv3 encryptions

* Bumping luasec takes care of proper TLS encryption.

* Bump OpenSSL to 1.0.1u and disable insecure deprecated SSLv2 and SSLv3.
I wanted to update it to OpenSSL_1_0_2l, but the Travis Clang build failed for mysterious reasons. 1.0.1u seems to work, so updating OpenSSL to a more recent version can wait for another day.

thirdparty/luasec/CMakeLists.txt

@@ -30,7 +30,7 @@ endif()
 ko_write_gitclone_script(
     GIT_CLONE_SCRIPT_FILENAME
     https://github.com/brunoos/luasec
-    dd9688cf12479afc21178638b0b41d640d9274c2
+    luasec-0.7alpha
     ${SOURCE_DIR}
 )
 

thirdparty/openssl/CMakeLists.txt

@@ -23,16 +23,16 @@ else()
     set(CFG_ENV_VAR "")
     set(CFG_OPTS "shared")
 endif()
-set(CFG_OPTS "${CFG_OPTS} no-asm no-idea no-mdc2 no-rc5 enable-ssl2")
+set(CFG_OPTS "${CFG_OPTS} no-asm no-idea no-mdc2 no-rc5 no-ssl2 no-ssl3")
 set(CFG_CMD sh -c "${CFG_ENV_VAR} ${SOURCE_DIR}/${CONFIG_SCRIPT} ${CFG_OPTS}")
 
-set(BUILD_CMD "$(MAKE) CC=\"${CC}\" SHARED_LDFLAGS=\"${SHARED_LDFLAGS}\" LD=\"${LD}\" RANLIB=\"${RANLIB}\"")
+set(BUILD_CMD "$(MAKE) depend && $(MAKE) CC=\"${CC}\" SHARED_LDFLAGS=\"${SHARED_LDFLAGS}\" LD=\"${LD}\" RANLIB=\"${RANLIB}\"")
 set(BUILD_CMD sh -c "${BUILD_CMD} --silent depend build_crypto build_ssl >/dev/null 2>&1")
 
 ko_write_gitclone_script(
     GIT_CLONE_SCRIPT_FILENAME
     https://github.com/openssl/openssl.git
-    OpenSSL_1_0_1t
+    OpenSSL_1_0_1u
     ${SOURCE_DIR}
 )