Fix breakage in SSL_connect, SSL_accept, etc. by not propagating

new retry conditions from the record layer all the way up to the
callers.  Instead we catch them at the top of the record layer
and retry the operations, unless we actually got a retry indicated
from actual IO operations.

ok jsing@ tb@

1 files changed, 3 insertions, 2 deletions

diff --git a/src/lib/libssl/tls13_internal.h b/src/lib/libssl/tls13_internal.h
index e9f629f387..7b3670bf45 100644
--- a/src/lib/libssl/tls13_internal.h
+++ b/src/lib/libssl/tls13_internal.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: tls13_internal.h,v 1.50 2020/01/23 11:57:20 jsing Exp $ */
+/* $OpenBSD: tls13_internal.h,v 1.51 2020/01/24 04:36:29 beck Exp $ */
 /*
  * Copyright (c) 2018 Bob Beck <beck@openbsd.org>
  * Copyright (c) 2018 Theo Buehler <tb@openbsd.org>
@@ -36,7 +36,8 @@ __BEGIN_HIDDEN_DECLS
 #define TLS13_IO_ALERT          -2
 #define TLS13_IO_WANT_POLLIN    -3
 #define TLS13_IO_WANT_POLLOUT   -4
-#define TLS13_IO_USE_LEGACY     -5
+#define TLS13_IO_WANT_RETRY     -5 /* Retry the previous call immediately. */
+#define TLS13_IO_USE_LEGACY     -6
 
 #define TLS13_ERR_VERIFY_FAILED         16
 #define TLS13_ERR_HRR_FAILED            17