vtls_scache: include cert_blob independently of verifypeer

[bagder]

The making of the TLS session cache key should use the cert blob independently of verifypeer on/off.

Follow-up to fa0ccd9

Spotted by Codex Security

[Copilot]

Pull request overview

Adjusts TLS session cache peer key generation so that a configured client-certificate blob contributes to the cache key regardless of verifypeer being enabled, preventing unintended session reuse across differing client cert inputs.

Changes:

• Moves inclusion of ssl->cert_blob into the peer key outside the ssl->verifypeer conditional.
• Ensures the cert blob hash is always incorporated when present, aligning cache partitioning with actual TLS client-auth configuration.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[icing]

Makes sense. Maybe the name cert_blob did not connect in my brain to "client cert" at the time.

[bagder]

augment review

[augmentcode]

🤖 Augment PR Summary

Summary: Updates TLS session cache peer key generation to always include the client certificate blob, even when peer verification is disabled.
Rationale: Prevents unintended session-cache key sharing across different in-memory client certificates when verifypeer is off.

_{🤖 Was this summary useful? React with 👍 or 👎}

[augmentcode]

Review completed. 1 suggestion posted.

Comment augment review to trigger a new review at any time.