tree 30d611f851d5c9d0cde4a42b816a82c433675e03
parent b32aa05538113798a07e086102ffb9d57dcdc6a8
author David Benjamin <davidben@google.com> 1622671133 -0400
committer Adam Langley <agl@google.com> 1623343300 +0000

Fix ext_pre_shared_key_clienthello_length calculation.

If we're dropping the PSK extension due to an HRR with mismatched hash
(looking back at that, we could easily have avoided that nuisance...
I've filed [0] on rfc8446bis), we don't predict the length correctly.
The consequence is we don't pad the second ClientHello to the desired
range. Fix this and add an assert.

[0] https://github.com/tlswg/tls13-spec/issues/1227

Change-Id: I47d880b6bdafa95840f7513b6b7718851f22554d
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/47998
Reviewed-by: Adam Langley <agl@google.com>