- if ((SSL_IS_TLS13(s) && !tls_construct_cert_status_body(s, pkt))
- || !WPACKET_close(pkt)) {
+ if (SSL_IS_TLS13(s) && !tls_construct_cert_status_body(s, pkt)) {
+ /* SSLfatal() already called */
+ return EXT_RETURN_FAIL;
+ }
+ if (!WPACKET_close(pkt)) {