If we're going to reject an insecure renegotiation, do it immediately,

even before parsing the client hello, since there is nothing the
client can say in the hello that will change our mind about it.

Call Policy::acceptable_protocol_version on the final negotiated
version, not what the client offered!

Clean up the server version choosing logic a bit.

Add Protocol_Version::best_known_match which returns the 'best'
version we know of matching a particular version.

0 files changed, 0 insertions, 0 deletions