Introduce and use dtls12_handshake_msg.

Add struct dtls12_handshake_msg and various related functions, which
allow for the construction of DTLS handshake messages and associated
fragments.

Use this on the DTLS write path for sending handshake message fragments.
This means that we no longer modify the init buffer, which also fixes a
bug where the message callback is called with a corrupted handshake
message when multiple fragments have been sent.

We also now correctly track fragment offsets when sending a handshake
message that results in multiple calls to dtls1_do_write_handshake_message().

This is the first step towards further untangling of the write path in
the legacy TLS stack.

ok kenjiro@ tb@

1 files changed, 2 insertions, 1 deletions

diff --git a/src/lib/libssl/Makefile b/src/lib/libssl/Makefile
index 7e423b0b43..0d5934508a 100644
--- a/src/lib/libssl/Makefile
+++ b/src/lib/libssl/Makefile
@@ -1,4 +1,4 @@
-# $OpenBSD: Makefile,v 1.86 2026/04/03 07:26:20 jsing Exp $
+# $OpenBSD: Makefile,v 1.87 2026/05/16 08:20:41 jsing Exp $
 
 .include <bsd.own.mk>
 .ifndef NOMAN
@@ -43,6 +43,7 @@ SRCS= \
         d1_lib.c \
         d1_pkt.c \
         d1_srtp.c \
+        dtls12_handshake_msg.c \
         pqueue.c \
         s3_cbc.c \
         s3_lib.c \