Backport fixes from OpenSSL DANE testing.

- Discard errors generated by raw TA key signature checks.
- Record the tadepth as zero with self-signed depth 0 TAs.

Robustness: Though it should never happen, don't update the tadepth
if already set.

Plus ran tls_dane.c and tls_server through ccformat.  Since my
indent(1) is now the NetBSD version, only changed the real diffs,
not deleted blank lines, ...