Ensure after an HRR any PSKs have the right hash
authorMatt Caswell <matt@openssl.org>
Mon, 13 Mar 2017 16:09:47 +0000 (16:09 +0000)
committerMatt Caswell <matt@openssl.org>
Thu, 16 Mar 2017 14:20:38 +0000 (14:20 +0000)
commitcf3e221bd90085035d869d3a233a03970d036638
treea566c5e0787619a9ff0a5ea871936f41881fb0d4
parent11c67eeaf4dd0376d84a90590e307d5d2e12f025
Ensure after an HRR any PSKs have the right hash

Don't include a PSK that does not have the right hash for the selected
ciphersuite following an HRR.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2895)
ssl/statem/extensions_clnt.c