let good_ciphersuites =
  String.concat ":"
    [
      "ECDHE-RSA-AES256-SHA384"
    ; "ECDHE-RSA-AES256-GCM-SHA384"
    ; "AES256-SHA256"
    ; "AES128-SHA256"
    ]

let good_ciphersuites =
  String.concat ":"
    [
      "ECDHE-RSA-AES256-GCM-SHA384"
    ; "ECDHE-RSA-AES128-GCM-SHA256"
    ]

Update ciphers used by stunnel/XAPI
Update ciphers used by stunnel/XAPI

For the sake of security, CBC ciphers are required to be removed from
TLS interface of XAPI.

But only one would remain in available cipher list after the removal.
Therefore a new configuration 'ECDHE-RSA-AES128-GCM-SHA25' is added.

Note: IANA name of 'ECDHE-RSA-AES128-GCM-SHA25 is
'TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256'.

Signed-off-by: Ming Lu <86631d26f49df881052ebfde731a5ecfc6b20429@citrix.com>
