Fix Early CCS bug

Fix SSL/TLS MITM vulnerability (CVE-2014-0224)

Only accept change cipher spec when it is expected instead of at any
time. This prevents premature setting of session keys before the master
secret is determined which an attacker could use as a MITM attack.

https://android-review.googlesource.com/#/c/96707/