[main] Make SSL_select_next_proto more robust to invalid calls.#1675