In ssl_cipher_get_evp(), fix off-by-one in index validation before accessing
arrays.

"kind of scary" deraadt@, ok guenther@