55     if (ilen != s->s3.previous_client_finished_len) {  in tls_parse_ctos_renegotiate()
60     if (memcmp(data, s->s3.previous_client_finished,  in tls_parse_ctos_renegotiate()
61                s->s3.previous_client_finished_len)) {  in tls_parse_ctos_renegotiate()
66     s->s3.send_connection_binding = 1;  in tls_parse_ctos_renegotiate()
418         s->s3.npn_seen = 1;  in tls_parse_ctos_npn()
452     OPENSSL_free(s->s3.alpn_proposed);  in tls_parse_ctos_alpn()
453     s->s3.alpn_proposed = NULL;  in tls_parse_ctos_alpn()
454     s->s3.alpn_proposed_len = 0;  in tls_parse_ctos_alpn()
456                        &s->s3.alpn_proposed, &s->s3.alpn_proposed_len)) {  in tls_parse_ctos_alpn()
588     if (s->s3.peer_tmp != NULL) {  in tls_parse_ctos_key_share()
613     if (s->s3.group_id != 0 && PACKET_remaining(&key_share_list) == 0) {  in tls_parse_ctos_key_share()
642         if (s->s3.group_id != 0  in tls_parse_ctos_key_share()
643                 && (group_id != s->s3.group_id  in tls_parse_ctos_key_share()
668         if ((s->s3.peer_tmp = ssl_generate_param_group(s, group_id)) == NULL) {  in tls_parse_ctos_key_share()
674         s->s3.group_id = group_id;  in tls_parse_ctos_key_share()
678         if (tls13_set_encoded_pub_key(s->s3.peer_tmp,  in tls_parse_ctos_key_share()
709             || (s->s3.flags & TLS1_FLAGS_STATELESS) == 0)  in tls_parse_ctos_cookie()
794     if (group_id != s->s3.group_id  in tls_parse_ctos_cookie()
795             || s->s3.tmp.new_cipher  in tls_parse_ctos_cookie()
843             || !s->method->put_cipher_by_char(s->s3.tmp.new_cipher, &hrrpkt,  in tls_parse_ctos_cookie()
862                 || !WPACKET_put_bytes_u16(&hrrpkt, s->s3.group_id)  in tls_parse_ctos_cookie()
939     s->s3.flags |= TLS1_FLAGS_RECEIVED_EXTMS;  in tls_parse_ctos_ems()
1174                                         s->s3.tmp.new_cipher->algorithm2)))) {  in tls_parse_ctos_psk()
1247     if (!s->s3.send_connection_binding)  in tls_construct_stoc_renegotiate()
1254             || !WPACKET_memcpy(pkt, s->s3.previous_client_finished,  in tls_construct_stoc_renegotiate()
1255                                s->s3.previous_client_finished_len)  in tls_construct_stoc_renegotiate()
1256             || !WPACKET_memcpy(pkt, s->s3.previous_server_finished,  in tls_construct_stoc_renegotiate()
1257                                s->s3.previous_server_finished_len)  in tls_construct_stoc_renegotiate()
1317     unsigned long alg_k = s->s3.tmp.new_cipher->algorithm_mkey;  in tls_construct_stoc_ec_pt_formats()
1318     unsigned long alg_a = s->s3.tmp.new_cipher->algorithm_auth;  in tls_construct_stoc_ec_pt_formats()
1348     if (s->s3.group_id == 0)  in tls_construct_stoc_supported_groups()
1370                 if (s->s3.group_id == group)  in tls_construct_stoc_supported_groups()
1464     int npn_seen = s->s3.npn_seen;  in tls_construct_stoc_next_proto_neg()
1466     s->s3.npn_seen = 0;  in tls_construct_stoc_next_proto_neg()
1478         s->s3.npn_seen = 1;  in tls_construct_stoc_next_proto_neg()
1489     if (s->s3.alpn_selected == NULL)  in tls_construct_stoc_alpn()
1496             || !WPACKET_sub_memcpy_u8(pkt, s->s3.alpn_selected,  in tls_construct_stoc_alpn()
1497                                       s->s3.alpn_selected_len)  in tls_construct_stoc_alpn()
1539     if (s->s3.tmp.new_cipher->algorithm_mac == SSL_AEAD  in tls_construct_stoc_etm()
1540         || s->s3.tmp.new_cipher->algorithm_enc == SSL_RC4  in tls_construct_stoc_etm()
1541         || s->s3.tmp.new_cipher->algorithm_enc == SSL_eGOST2814789CNT  in tls_construct_stoc_etm()
1542         || s->s3.tmp.new_cipher->algorithm_enc == SSL_eGOST2814789CNT12  in tls_construct_stoc_etm()
1543         || s->s3.tmp.new_cipher->algorithm_enc == SSL_MAGMA  in tls_construct_stoc_etm()
1544         || s->s3.tmp.new_cipher->algorithm_enc == SSL_KUZNYECHIK) {  in tls_construct_stoc_etm()
1561     if ((s->s3.flags & TLS1_FLAGS_RECEIVED_EXTMS) == 0)  in tls_construct_stoc_ems()
1600     EVP_PKEY *ckey = s->s3.peer_tmp, *skey = NULL;  in tls_construct_stoc_key_share()
1610                 || !WPACKET_put_bytes_u16(pkt, s->s3.group_id)  in tls_construct_stoc_key_share()
1637             || !WPACKET_put_bytes_u16(pkt, s->s3.group_id)) {  in tls_construct_stoc_key_share()
1642     if ((ginf = tls1_group_id_lookup(s->ctx, s->s3.group_id)) == NULL) {  in tls_construct_stoc_key_share()
1675         s->s3.tmp.pkey = skey;  in tls_construct_stoc_key_share()
1713         if (ssl_gensecret(s, s->s3.tmp.pms, s->s3.tmp.pmslen) == 0) {  in tls_construct_stoc_key_share()
1718     s->s3.did_kex = 1;  in tls_construct_stoc_key_share()
1736     if ((s->s3.flags & TLS1_FLAGS_STATELESS) == 0)  in tls_construct_stoc_cookie()
1751             || !WPACKET_put_bytes_u16(pkt, s->s3.group_id)  in tls_construct_stoc_cookie()
1752             || !s->method->put_cipher_by_char(s->s3.tmp.new_cipher, pkt,  in tls_construct_stoc_cookie()
1755             || !WPACKET_put_bytes_u8(pkt, s->s3.peer_tmp == NULL)  in tls_construct_stoc_cookie()
1862     if (((s->s3.tmp.new_cipher->id & 0xFFFF) != 0x80  in tls_construct_stoc_cryptopro_bug()
1863          && (s->s3.tmp.new_cipher->id & 0xFFFF) != 0x81)  in tls_construct_stoc_cryptopro_bug()