polarssl: check us->notify_verify_error for NULL before calling it