SSL [DHE]: Validate the Ys received from the peer.

This is required by the current FFDHE draft, and is needed to protect
the connection from MITM attacks.

Also changes some alerts from unexpected_message to handshake_failure
as required by the same draft.
These catches are intended to catch buffer underflow. That is however already done in the caller in Connection.