Use SHA instead of MD5 hash as the PKIX DB's key

MD5 is not available in FIPS mode.
Avoid using non-FIPS compatible settings in tests
Properly filter ssl cipher suites reported as supported

The original code only filtered out ECC suites when ECC was not
supported. However with FIPS mode it is important to properly discard
unsupported symmetric key algorithms as well (e.g. RC4).