SSL [DHE]: Validate the Ys received from the peer.

This is required by the current FFDHE draft, and is needed to protect
the connection from MITM attacks.

Also changes some alerts from unexpected_message to handshake_failure
as required by the same draft.