third_party/openssl: add ChaCha20+Poly1305 support.

openssl/ssl/s3_pkt.c

 /* ssl/s3_pkt.c */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
  * This package is an SSL implementation written
  * by Eric Young (eay@cryptsoft.com).
  * The implementation was written so as to conform with Netscapes SSL.
  * 
  * This library is free for commercial and non-commercial use as long as
  * the following conditions are aheared to.  The following conditions
@@ skipping 755 matching lines @@
                         eivlen = EVP_CIPHER_CTX_iv_length(s->enc_write_ctx);
                         if (eivlen <= 1)
                                 eivlen = 0;
                         }
                 /* Need explicit part of IV for GCM mode */
                 else if (mode == EVP_CIPH_GCM_MODE)
                         eivlen = EVP_GCM_TLS_EXPLICIT_IV_LEN;
                 else
                         eivlen = 0;
                 }
-        else 
+        else if (s->aead_write_ctx != NULL &&
+                 s->aead_write_ctx->variable_nonce_included_in_record)
+                {
+                eivlen = s->aead_write_ctx->variable_nonce_len;
+                }
+        else
                 eivlen = 0;
 
         /* lets setup the record stuff. */
         wr->data=p + eivlen;
         wr->length=(int)len;
         wr->input=(unsigned char *)buf;
 
         /* we now 'read' from wr->input, wr->length bytes into
          * wr->data */
 
@@ skipping 727 matching lines @@
                         cb=s->ctx->info_callback;
 
                 if (cb != NULL)
                         {
                         j=(s->s3->send_alert[0]<<8)|s->s3->send_alert[1];
                         cb(s,SSL_CB_WRITE_ALERT,j);
                         }
                 }
         return(i);
         }