Keep cipher lists sorted in the source instead of sorting them at

runtime, thus removing the need for a lock. Add a test to ssltest
to verify that the cipher lists are sorted.