If we fail during tls handshake, don't send an EAP-Fail msg

Because tls_handshake_recv() says there's something wrong with
the TLS session.  Therefore, we can't use it for anything
Check for invalid TLS handshake

If the system has a vulnerable version of OpenSSL, and the
admin has told us to allow it, we want to catch and stop
the problem.