Store the current SSL state separately from the cumulative state.

The ssl_state keyword needs the current state, not the cumulative state
in order be compatible with Snort's implementation.
Support ssl_state negation (redmine bug 1231) to be more compatible with Snort.

Also use "," as the state separator instead of "|" to be compatible with
Snort.