Add TLSv1.2 ciphers to those allowed. Fixes BUGZ-4012

Use cipher exclude format to disable SSLv2 ciphers instead of listing all versions. Should work irrespective of supported TLS/SSL versions.