OpenSSL: add support for the TLS padding extension.

openssl/ssl/s23_clnt.c

 /* ssl/s23_clnt.c */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
  * This package is an SSL implementation written
  * by Eric Young (eay@cryptsoft.com).
  * The implementation was written so as to conform with Netscapes SSL.
  * 
  * This library is free for commercial and non-commercial use as long as
  * the following conditions are aheared to.  The following conditions
@@ skipping 448 matching lines @@
                         /* number of bytes to write */
                         s->init_num=i+2;
                         s->init_off=0;
 
                         ssl3_finish_mac(s,&(buf[2]),i);
                         }
                 else
                         {
                         /* create Client Hello in SSL 3.0/TLS 1.0 format */
 
-                        /* do the record header (5 bytes) and handshake message header (4 bytes) last */
+                        /* do the record header (5 bytes) and handshake message
+                         * header (4 bytes) last. Note: the code to add the
+                         * padding extension in t1_lib.c depends on the size of
+                         * this prefix. */
                         d = p = &(buf[9]);
                         
                         *(p++) = version_major;
                         *(p++) = version_minor;
 
                         /* Random stuff */
                         memcpy(p, s->s3->client_random, SSL3_RANDOM_SIZE);
                         p += SSL3_RANDOM_SIZE;
 
                         /* Session ID (zero since there is no reuse) */
@@ skipping 297 matching lines @@
                 SSLerr(SSL_F_SSL23_GET_SERVER_HELLO,SSL_R_SESSION_MAY_NOT_BE_CREATED);
                 goto err;
                 }
         if (!ssl_get_new_session(s,0))
                 goto err;
 
         return(SSL_connect(s));
 err:
         return(-1);
         }