Validate cipher suite after HelloRetryRequest

[julek-wolfssl]

Add validation to ensure the cipher suite in the ServerHello matches the one specified in the HelloRetryRequest.

[rizlik]

Did you consider checking ssl->options.cipherSuite* against the value on the wire while parsing the ServerHello instead of storing in a new variable? This also moves the check inside DoTls13ServerHello that looks like a better place for the check

[julek-wolfssl]

@rizlik The check is already inside of DoTls13ServerHello so I'm not sure what you mean. I used a new variable because I wanted to make the check explicit but if you think it is safe to assume ssl->options.cipherSuite* does not change value then I can change it to re-use that.

[julek-wolfssl]

Retest this please FAIL scripts/openssl.test

[rizlik]

@rizlik The check is already inside of DoTls13ServerHello so I'm not sure what you mean.

disregard this .

I used a new variable because I wanted to make the check explicit but if you think it is safe to assume ssl->options.cipherSuite* does not change value then I can change it to re-use that.

It's ok to add a new variable then,