Fix up error codes after splitting up tls_construct_key_exchange()