Harden TLS handshake validation, OpenSSL-compat defaults, and stale code paths #6378

Job	Run time
build library (--disable-asm --enable-all-crypto --enable-mlkem --enable-lms --enable-xmss --enab...	51s
build library (--enable-intelasm --enable-sp-asm --enable-all-crypto --enable-mlkem --enable-lms ...	50s
build library (--enable-intelasm --enable-sp-asm)	31s
build library (--disable-asm --enable-mlkem --enable-lms --enable-xmss --enable-mldsa)	36s
build library (--disable-asm)	28s
build library (--enable-intelasm --enable-sp-asm --enable-mlkem --enable-lms --enable-xmss --enab...	36s
	3m 52s

Provide feedback