[openssl/openssl] d015b5: Remove spurious error queue entries on early data

[Matt Caswell]

  Branch: refs/heads/openssl-3.1
  Home:   https://github.com/openssl/openssl
  Commit: d015b50dc9af0640c7c019a693368c3488d692d8
      https://github.com/openssl/openssl/commit/d015b50dc9af0640c7c019a693368c3488d692d8
  Author: Matt Caswell <matt at openssl.org>
  Date:   2023-03-15 (Wed, 15 Mar 2023)

  Changed paths:
    M ssl/record/ssl3_record.c

  Log Message:
  -----------
  Remove spurious error queue entries on early data

Early data decryption is expected to fail sometimes. If it does we should
not leave spurious error entries on the queue.

Fixes #20377

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/20442)


  Commit: 85e247ebc08c07ed4a86f8a128ddceeb3f48bcbc
      https://github.com/openssl/openssl/commit/85e247ebc08c07ed4a86f8a128ddceeb3f48bcbc
  Author: Matt Caswell <matt at openssl.org>
  Date:   2023-03-15 (Wed, 15 Mar 2023)

  Changed paths:
    M test/sslapitest.c

  Log Message:
  -----------
  Test that there are no errors on the stack for rejected early data

If we reject early data then it is normal for decryption operations to
fail. We should ensure there are no spurious errors on the stack in that
case. This adds a test for that scenario.

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/20442)


Compare: https://github.com/openssl/openssl/compare/fe24a06cfad9...85e247ebc08c