[openssl/openssl] 84a149: Change the TLS handshake keys early if we're not d...

[Matt Caswell]

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 84a149254f977f502dd2314169812fc6eae8c309
      https://github.com/openssl/openssl/commit/84a149254f977f502dd2314169812fc6eae8c309
  Author: Matt Caswell <matt at openssl.org>
  Date:   2023-08-24 (Thu, 24 Aug 2023)

  Changed paths:
    M ssl/statem/statem_clnt.c
    M ssl/statem/statem_lib.c
    M test/recipes/75-test_quicapi_data/ssltraceref.txt

  Log Message:
  -----------
  Change the TLS handshake keys early if we're not doing early data

We change the client TLS handshake keys as late as possible so that we
don't disturb the keys if we are writing early data. However for QUIC we
want to do this as early as possible (after ServerHello). Since we will
never do TLS early data with QUIC we just do it as early as possible if
early data is not being used.

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21810)