tree bec8c8019aa72db4c83ce75a5afb1a90a4330238
parent 635b7d3f2a3a4c1caaf772dc9a6c1cdcb958f6fe
author Matt Caswell <matt@openssl.org> 1489659519 +0000
committer Matt Caswell <matt@openssl.org> 1489678661 +0000

Fix the Padding extension

In OpenSSL 1.1.0 the padding extension MUST be last because it calculates
the length of everything that has been written into the ClientHello to
determine whether it needs to be padded or not. With TLSv1.3 that isn't
possible because the specification requires that the PSK extension is last.
Therefore we need to fix the padding extension to take account of any PSK
extension that will be later added.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2968)