v3.1.13

Changelog

• da75e4d Backport record-layer validation fixes
• fa6e8d3 Limit peer RSA key sizes before signature verification
• 22bf92f Prevent early application data from blocking handshakes
• 37cd0b4 Reject unoffered curves in DTLS client key exchange
• ab433f0 Verify client Finished in DTLS 1.2 full handshakes
• 80b6c18 Negotiate DTLS parameters from the cookie CH
• 979ad79 Process the client cer flight once per handshake
• 252cf49 Honor local signature policy for CertificateVerify
• cb56053 Validate handshake signature against certificate keys
• f444d08 Bound handshake cache memory usage