Change tls_choose_sigalg so it can set errors and alerts.