Todd Short

/hold

This is an improvement, but it's not perfect... there's still a race condition.

/unhold

ping @kevinrizza ?

Were the release note text (or anything else) different?

> that doesn't seem right... If the client asks for an algorithm that the server doesn't support, then the server should simply continue with no compression, not abort the connection...

Merged into master, and cherry-picked into openssl-3.3. The cherry-pick to openssl-3.2 was non-trivial, so another PR will have to be opened @DDvO.

So, after a discussion, we decided to _hopefully_ make it easier on all, to reduce churn on this PR. We'd like to not make many changes to this PR _unless...

@everettraven @m1kola @acornett21 PTAL We've rebased the PR and updated the unit tests, and will be going forward with this. Other significant changes to be done have been noted in...

@m1kola (github doesn't support comment threads), I do believe we need to distinguish between Resolution errors, which likely involve errors in the `ClusterExtension` resource, vs. other errors that can occur...