ssl_check_clienthello_tlsext_late
int ssl_check_clienthello_tlsext_late(SSL *s);
if (ssl_check_clienthello_tlsext_late(s) <= 0) {