tree 28768f5d24e603a82d3bbff2e04b989d229b9368
parent 800046fecf1b314b0a1d8d993f854a293a5532cc
author David Benjamin <davidben@google.com> 1508269726 -0400
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1508902316 +0000

Check early ALPN before offering 0-RTT.

We enforce that servers don't send bogus ALPN values, so consumers may
assume that SSL_get0_alpn_selected won't have anything terribly weird.
To maintain that invariant in the face of folks whose ALPN preferences
change (consider a persisted session cache), we should decline to offer
0-RTT if early_alpn would have been rejected by the check anyway.

Change-Id: Ic3a9ba4041d5d4618742eb05e27033525d96ade1
Reviewed-on: https://boringssl-review.googlesource.com/22067
Commit-Queue: David Benjamin <davidben@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
Reviewed-by: Steven Valdez <svaldez@google.com>