Fix extended master secret implementation in tlslite

third_party/tlslite/patches/extended_master_secret.patch

Index: third_party/tlslite/patches/extended_master_secret.patch
diff --git a/third_party/tlslite/patches/extended_master_secret.patch b/third_party/tlslite/patches/extended_master_secret.patch
index 19bf4072c6a05494a6779ad1e431e8e9ad76dbbf..b6ad58ddfd5e17cc98ed4c75786fc4128d41946a 100644
--- a/third_party/tlslite/patches/extended_master_secret.patch
+++ b/third_party/tlslite/patches/extended_master_secret.patch
@@ -11,7 +11,7 @@ index 6d78a20..f9c8676 100644
      supports_npn = 13172
      channel_id = 30032
 diff --git a/third_party/tlslite/tlslite/handshakesettings.py b/third_party/tlslite/tlslite/handshakesettings.py
-index 605ed42..7679823 100644
+index 605ed42..a7b6ab9 100644
 --- a/third_party/tlslite/tlslite/handshakesettings.py
 +++ b/third_party/tlslite/tlslite/handshakesettings.py
 @@ -111,6 +111,10 @@ class HandshakeSettings(object):
@@ -33,6 +33,14 @@ index 605ed42..7679823 100644
  
      # Validates the min/max fields, and certificateTypes
      # Filters out unsupported cipherNames and cipherImplementations
+@@ -146,6 +151,7 @@ class HandshakeSettings(object):
+         other.tlsIntolerant = self.tlsIntolerant
+         other.tlsIntoleranceType = self.tlsIntoleranceType
+         other.alertAfterHandshake = self.alertAfterHandshake
++        other.enableExtendedMasterSecret = self.enableExtendedMasterSecret
+ 
+         if not cipherfactory.tripleDESPresent:
+             other.cipherNames = [e for e in self.cipherNames if e != "3des"]
 diff --git a/third_party/tlslite/tlslite/mathtls.py b/third_party/tlslite/tlslite/mathtls.py
 index 60a331a..0a23fe1 100644
 --- a/third_party/tlslite/tlslite/mathtls.py