KNF
Simplify error path of DH_check_pub_key()
Clean up and simplify SSL_CIPHER_description by always using asprintf. If
a buffer was supplied then we copy the result into it. Also make the
failure case return values match the documentation.

Joint work with beck@