tree 1bd28396cd02ae2a3ef9636a649cc2b41161f800
parent e907ed4c4b92cd7cea250240e32695c73dacf7eb
author Matthew Braithwaite <mab@google.com> 1541204975 -0700
committer Matt Braithwaite <mab@google.com> 1541467150 +0000

Serialize SSL curve list in handoff and check it on application.

A split SSL handshake may involve 2 binaries, potentially built at
different versions: call them the "handoff/handback" binary and the
"handshake" binary.  We would like to guarantee that the
handoff/handback binary does not make any promises that the handshake
binary cannot keep.

d2ed382 serialized |kCiphers|; this commit extends the same approach
to |kNamedGroups|.

Change-Id: Idb13e54e9b189236309f6054a36872c5a4d96985
Reviewed-on: https://boringssl-review.googlesource.com/c/32825
Reviewed-by: David Benjamin <davidben@google.com>