commit b04f947941d08b5d077a63b017ecee5e4e2e11cc
author Kazuki Yamaguchi <k@rhe.jp> Sun Dec 13 00:51:06 2015 +0900
committer Matt Caswell <matt@openssl.org> Mon May 16 11:45:25 2016 +0100
tree 4ebddd31995a1f9dcaff04529dd68bc199431877
parent c5ebfcab713a82a1d46a51c8c2668c419425b387

Fix NPN protocol name list validation

Since 50932c4 "PACKETise ServerHello processing",
ssl_next_proto_validate() incorrectly allows empty protocol name.
draft-agl-tls-nextprotoneg-04[1] says "Implementations MUST ensure that
the empty string is not included and that no byte strings are
truncated."
This patch restores the old correct behavior.

[1] https://tools.ietf.org/html/draft-agl-tls-nextprotoneg-04

Reviewed-by: Emilia Käsper <emilia@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>