Restore TLS 1.3 TLS1_CK_* constants

Accidentally removed them in
https://boringssl-review.googlesource.com/c/boringssl/+/82308 in a
rebase mishap. We're not quite able to remove these yet.

Change-Id: Iec0b86b32fd575b92fb0c5494a7f0d3bb2c3e0ff
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/82607
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: Lily Chen <chlily@google.com>
Commit-Queue: Lily Chen <chlily@google.com>
Auto-Submit: David Benjamin <davidben@google.com>
diff --git a/include/openssl/tls1.h b/include/openssl/tls1.h
index 788eaab..90375e5 100644
--- a/include/openssl/tls1.h
+++ b/include/openssl/tls1.h
@@ -199,6 +199,12 @@
 #define TLS1_3_CK_AES_256_GCM_SHA384 0x03001302
 #define TLS1_3_CK_CHACHA20_POLY1305_SHA256 0x03001303
 
+// The following constants are legacy aliases of |TLS1_3_CK_*|.
+// TODO(davidben): Migrate callers to the new name and remove these.
+#define TLS1_CK_AES_128_GCM_SHA256 TLS1_3_CK_AES_128_GCM_SHA256
+#define TLS1_CK_AES_256_GCM_SHA384 TLS1_3_CK_AES_256_GCM_SHA384
+#define TLS1_CK_CHACHA20_POLY1305_SHA256 TLS1_3_CK_CHACHA20_POLY1305_SHA256
+
 // XXX
 // Inconsistency alert:
 // The OpenSSL names of ciphers with ephemeral DH here include the string