record: make CCS handling stricter in TLS 1.3

Fixes #618 (closed), and minor build issues.

Checklist

• Code modified for feature
• Test suite updated with functionality tests
• Test suite updated with negative tests
• Documentation updated / NEWS entry present (for non-trivial changes)

Reviewer's checklist:

• Any issues marked for closing are addressed
• There is a test suite reasonably covering new functionality or modifications
• Function naming, parameters, return values, types, etc., are consistent and according to CONTRIBUTION.md
• This feature/change has adequate documentation added
• No obvious mistakes in the code

unmarked as a Work In Progress

changed the description

added blocked label

Although the self-test might not be sufficient, I've confirmed that it fixes the failure with the tlsfuzzer script (test-tls13-ccs.py). Marking as blocked until the script is merged in tlsfuzzer.

added 1 commit

• 818cf8c1 - record: make CCS handling stricter in TLS 1.3

Compare with previous version

resolved all discussions

mentioned in merge request !818 (merged)

added after next release label

removed after next release label

removed blocked label

added blocked label

The test script is tracked at: https://github.com/tomato42/tlsfuzzer/pull/466

added 42 commits

• 818cf8c1...493723ee - 40 commits from branch master
• e44026f5 - record: make CCS handling stricter in TLS 1.3
• 45e871a5 - tlsfuzzer: update to the latest upstream to eanble CCS tests

Compare with previous version

added 1 commit

• 46d47f79 - tlsfuzzer: update to the latest upstream to eanble CCS tests

Compare with previous version

removed blocked label

Waived the failing tests because of #645 (closed).

approved this merge request

merged

mentioned in commit 72014674

Thank you!

changed milestone to %Release of GnuTLS 3.6.6