Address issues in record layer decoding
This addresses few issues found in record layer decoding, and adds an option to require connections that always use the CBC ciphersuites in safe (etm) mode.
Checklist
-
Code modified for feature -
Test suite updated with functionality tests -
Documentation updated
Reviewer's checklist:
-
Any issues marked for closing are addressed -
There is a test suite reasonably covering new functionality or modifications -
Function naming, parameters, return values, types, etc., are consistent and according to CONTRIBUTION.md
-
This feature/change has adequate documentation added -
No obvious mistakes in the code