Move ciphersuite selection before session resumption in TLSv1.3
authorMatt Caswell <matt@openssl.org>
Tue, 6 Jun 2017 16:19:32 +0000 (17:19 +0100)
committerMatt Caswell <matt@openssl.org>
Fri, 16 Jun 2017 09:57:59 +0000 (10:57 +0100)
commit0de6d66d36dc5f6d46247c63da71b73d7e8e018c
treed92e55f710efb5c43ade2b2c7bdcf03317e9dccb
parentca0413ae14f8fc9cc840b8acaadd150ea290285f
Move ciphersuite selection before session resumption in TLSv1.3

This does things as per the recommendation in the TLSv1.3 spec. It also
means that the server will always choose its preferred ciphersuite.
Previously the server would only select ciphersuites compatible with the
session.

Reviewed-by: Ben Kaduk <kaduk@mit.edu>
(Merged from https://github.com/openssl/openssl/pull/3623)
ssl/s3_lib.c
ssl/statem/extensions_srvr.c
ssl/statem/statem_srvr.c
test/sslapitest.c