tree a98185e47d028d0bbb081abb5664b97b32cf41d5
parent f9cc26f9c1c07668e29be71e08324f68d50d0942
author David Benjamin <davidben@google.com> 1581283732 -0500
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1581623877 +0000

Clean up TLS 1.3 handback logic.

There's no need to treat the 1-RTT and 0-RTT handback flows differently.
This aligns the 1-RTT handback with the 0-RTT point. This consistently
installs the decryption keys in the state machine after handback rather
than while applying the handback.

Update-Note: This changes the serialization format for TLS 1.3 split
handshakes, which were only just added.

Change-Id: I0e109cb8d9ecd3c8658dfa26059cbe0139f82eed
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/39988
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: Matt Braithwaite <mab@google.com>