Re: [9front] libsec: various tls changes

[cinap_lenrek@felloff.net]

> wdym? tlsServerExtensions always returns nil,
> (well, for now as we don't send any extensions.)
> so, we don't need to free ext.

hm... that sounds like a trap waiting to happen.

if we never produce any extension response, maybe
it would be better to just get rid of it for now
and return a error status instead?

also, the naming would need to change. as this
function actually never *produces* server
extensions and instead *processes* the client
extensions... what about something like:

if(!okClientExtensions(c, m.u.clientHello.extensions))
	goto Err;

once we need to produce server extensions we
can add the function back... and we can place
it somewhere near/before the sending the
server hello so error handling is less complicated.

--
cinap