ssl/statem: Don't compare size_t with less than zero