Fix SSL/TLS ciphers/options for HAProxy services

[OpenStack Infra]

https://review.openstack.org/335057
Dear bug triager. This bug was created since a commit was marked with DOCIMPACT.

commit 996058caddcd57eed9bfc9d92def923ca68cd7e3
Author: Maksim Malchuk <email address hidden>
Date: Mon Jun 27 23:43:35 2016 +0300

    Fix SSL/TLS ciphers/options for HAProxy services

    * implement the same SSL/TLS ciphers as for Fuel master node (disable
      WEAK DHE ciphers but leave TLSv1 working: LP#1497195
    * remove useless dh_param options because they not needed anymore
    * move the ciphers list to the cluster::haproxy parameters and don't
      repeat this list in the several configuration files (DRY)
    * prepare for an upgrade and move the options list to global settings
      too (DRY) (TODO)
    * ssl_default_ciphers can be changed by end user via hiera

    DocImpact
    Change-Id: I5e5784521641ea3bbe3c4aa40c581f996b268aad
    Closes-Bug: #1594359
    Signed-off-by: Maksim Malchuk <email address hidden>