Make sure clean the stored session

We need to delete the stored session when any fatal errors occurs.
This operation should be taken in the Conn.notify function.

conn.go

@@ -676,14 +676,6 @@ func (c *Conn) handleIncomingPacket(buf []byte, enqueue bool) (bool, *alert.Aler
 		var err error
 		buf, err = c.state.cipherSuite.Decrypt(buf)
 		if err != nil {
-			if len(c.state.SessionID) > 0 {
-				// According to the RFC, we need to delete the stored session.
-				// https://datatracker.ietf.org/doc/html/rfc5246#section-7.2
-				if delErr := c.fsm.cfg.sessionStore.Del(c.state.SessionID); delErr != nil {
-					return false, &alert.Alert{Level: alert.Fatal, Description: alert.InternalError}, delErr
-				}
-				return false, &alert.Alert{Level: alert.Fatal, Description: alert.DecryptError}, err
-			}
 			c.log.Debugf("%s: decrypt failed: %s", srvCliStr(c.state.isClient), err)
 			return false, nil, nil
 		}
@@ -764,6 +756,13 @@ func (c *Conn) recvHandshake() <-chan chan struct{} {
 }
 
 func (c *Conn) notify(ctx context.Context, level alert.Level, desc alert.Description) error {
+	if level == alert.Fatal && len(c.state.SessionID) > 0 {
+		// According to the RFC, we need to delete the stored session.
+		// https://datatracker.ietf.org/doc/html/rfc5246#section-7.2
+		if err := c.fsm.cfg.sessionStore.Del(c.state.SessionID); err != nil {
+			return err
+		}
+	}
 	return c.writePackets(ctx, []*packet{
 		{
 			record: &recordlayer.RecordLayer{