Tls13Client.verifyNegotiatedCipher
private
void verifyNegotiatedCipher(CipherSuiteId cs)Verifies that the server-negotiated cipher suite was offered.
RFC 8446 §4.1.3: the server's choice must come from the client's offered list; anything else is a handshake failure.
Parameters
cs | The cipher suite selected by the server. |
Throws
TlsHandshakeException when the suite was not offered.