tree 95713d37dccaa97059bd42bacf0872086826ff69
parent 8f5e2ebcee628ef02add9b21955402b0c6256624
author David Benjamin <davidben@chromium.org> 1422776039 -0500
committer Adam Langley <agl@google.com> 1422995646 +0000

Simplify DTLS epoch rewind.

SSL_AEAD_CTX ownership is currently too confusing. Instead, rely on the lack of
renego, so the previous epoch always uses the NULL cipher. (Were we to support
DTLS renego, we could keep track of s->d1->last_aead_write_ctx like
s->d1->last_write_sequence, but it isn't worth it.)

Buffered messages also tracked an old s->session, but this is unnecessary. The
s->session NULL check in tls1_enc dates to the OpenSSL initial commit and is
redundant with the aead NULL check.

Change-Id: I9a510468d95934c65bca4979094551c7536980ae
Reviewed-on: https://boringssl-review.googlesource.com/3234
Reviewed-by: Adam Langley <agl@google.com>