sm,dirmngr: Restrict allowed parameters used with rsaPSS.

* sm/certcheck.c (extract_pss_params): Check the used PSS params.
* dirmngr/crlcache.c (finish_sig_check): Ditto.
* dirmngr/validate.c (check_cert_sig): Ditto.

------------------------ >8 ------------------------

See
https://www.metzdowd.com/pipermail/cryptography/2019-November/035449.html

• GnuPG-bug-id: T4538
• Signed-off-by: Werner Koch <wk@gnupg.org>