tree 485b09a562fd69967558f593f4d2ec299c05ec7d
parent 0dcc6e231d36e41a1f2d07d1aa0094846d684099
author Matthew Braithwaite <mab@google.com> 1578956430 -0800
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1579124178 +0000

Proxy: send whole SSL records through the handshaker.

In split handshake tests, it is already the case that the handshaker
must signal the proxy when it wants to read more data.  But there was
not a lot of specificity about exactly how much data would be read.

The case of rejecting early data sent with a second ClientHello,
following a HelloRetryRequest,[1] requires this to be nailed down, in
order that the handshaker should not process the early data.

This commit changes the handshaker to read exactly one SSL record and
then stop, when it is asked to read.  The pattern of I/O operations
remains undefined.

[1] See SkipEarlyData-SecondClientHelloEarlyData-TLS13-Split.

Change-Id: I30f58e57fc5ebff3f7c7ef8482cc629e42fef6a4
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/39524
Commit-Queue: Matt Braithwaite <mab@google.com>
Reviewed-by: David Benjamin <davidben@google.com>