Improve SNI validation, socket read error checking

• On Windows, properly do SNI and server cert chain verification when the root CA has been overridden
• On Posix systems, check socket read error before making any potential log calls which could overwrite the error info via internal sys calls